onboarding-guide
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains a 'Capability Gap Response' rule that instructs the agent to suggest installing external code using the command
/install 技能宝 github:mindverse/skillhub. This repository is from a source that is not recognized as a trusted organization or well-known service, posing a risk of installing and executing unverified third-party content. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied data regarding job roles, team structures, and technical stacks to generate customized onboarding plans. There are no explicit instructions to sanitize this input or boundary markers to prevent the agent from executing instructions that might be embedded within the user-provided descriptions.
Audit Metadata