linkfox-ruiguan-utility-patent-detection
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill's onboarding documentation (
references/onboarding.md) and thescripts/onboarding.pyscript provide instructions to modify shell configuration files such as~/.zshrcand~/.bashrcby appendingexportcommands for API keys. Modifying shell profiles is a persistence mechanism that allows environment variables to remain active across terminal sessions. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests
productTitleandproductDescriptionprovided by the user inSKILL.md, which are then passed to an external API viascripts/ruiguan_utility_patent_detection.py. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers to separate external data (like patent abstracts or claims) from agent instructions in the output tables.
- Capability inventory: The skill uses scripts that perform network operations (
urllib.request) and write files to the project directory (linkfox/subfolder) as seen inscripts/ruiguan_utility_patent_detection.py. - Sanitization: There is no mention of sanitizing or escaping the text returned from the patent database before presenting it to the agent, which could allow instructions embedded in the data to influence agent behavior.
- [EXTERNAL_DOWNLOADS]: The
scripts/onboarding.pyscript directs users to install external Python packages, specificallyrequests,qrcode, andpillow, through thepippackage manager to enable full functionality. - [COMMAND_EXECUTION]: The skill executes Python scripts (
scripts/ruiguan_utility_patent_detection.pyandscripts/onboarding.py) that perform local file system operations and network requests to vendor-managed endpoints.
Recommendations
- AI detected serious security threats
Audit Metadata