linkfox-zhihuiya-legal-status
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests patent metadata from external database APIs which could contain attacker-controlled text strings.
- Ingestion points: Data from the PatSnap endpoint (
https://tool-gateway.linkfox.com/zhihuiya/legalStatus) is loaded into the agent session viascripts/zhihuiya_legal_status.py. - Boundary markers: Explicit boundaries or formatting rules to segregate text attributes are absent in the summary generation process.
- Capability inventory: The capability profile includes network queries and local data file persistence under the
linkfoxdirectory. No dangerous command execution or evaluation blocks exist. - Sanitization: Responses are structured via
json.loads(), minimizing arbitrary instruction parsing risks.
Audit Metadata