pm-market
Warn
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill preamble executes a local shell script
check-update.shvia the Bash tool to handle versioning and updates. - [COMMAND_EXECUTION]: The skill instructs the agent to dynamically locate and execute an external utility named
anysearch_cli.pyby searching through several platform-specific hidden directories (e.g.,~/.claude/skills/anysearch/scripts/,~/.cursor/skills/anysearch/scripts/,~/.anysearch/scripts/) and then running it viapython3. This dynamic path discovery and execution of external code depends on utilities whose integrity and source are not managed by this skill. - [EXTERNAL_DOWNLOADS]: The skill retrieves data from numerous external domains, including
iresearch.cn,36kr.com, andanalysys.cn, usingWebSearchand themcp__exa__web_search_exaMCP tool for market research purposes. - [PROMPT_INJECTION]: The skill processes untrusted content from web searches to generate structured reports, which presents a surface for indirect prompt injection.
- Ingestion points: External search results retrieved from the web and local content from
docs/01-需求调研/需求调研报告.md. - Boundary markers: Absent. The skill does not implement delimiters or specific instructions for the agent to ignore potentially malicious commands embedded in the retrieved web data.
- Capability inventory: The skill has access to
Bash(command execution),Write(file system modification), andAgent(subagent orchestration). - Sanitization: Absent. Data from external sources is summarized and written to documents without formal validation or content filtering.
Audit Metadata