linkfox-ruiguan-utility-patent-detection

Fail

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: HIGHPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PERSISTENCE]: The skill's onboarding documentation (references/onboarding.md) and the scripts/onboarding.py script provide instructions to modify shell configuration files such as ~/.zshrc and ~/.bashrc by appending export commands for API keys. Modifying shell profiles is a persistence mechanism that allows environment variables to remain active across terminal sessions.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests productTitle and productDescription provided by the user in SKILL.md, which are then passed to an external API via scripts/ruiguan_utility_patent_detection.py.
  • Boundary markers: The instructions do not specify the use of delimiters or boundary markers to separate external data (like patent abstracts or claims) from agent instructions in the output tables.
  • Capability inventory: The skill uses scripts that perform network operations (urllib.request) and write files to the project directory (linkfox/ subfolder) as seen in scripts/ruiguan_utility_patent_detection.py.
  • Sanitization: There is no mention of sanitizing or escaping the text returned from the patent database before presenting it to the agent, which could allow instructions embedded in the data to influence agent behavior.
  • [EXTERNAL_DOWNLOADS]: The scripts/onboarding.py script directs users to install external Python packages, specifically requests, qrcode, and pillow, through the pip package manager to enable full functionality.
  • [COMMAND_EXECUTION]: The skill executes Python scripts (scripts/ruiguan_utility_patent_detection.py and scripts/onboarding.py) that perform local file system operations and network requests to vendor-managed endpoints.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 15, 2026, 07:11 AM