linkfox-zhihuiya-patent-family

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONOBFUSCATIONCOMMAND_EXECUTION
Full Analysis
  • [PERSISTENCE]: The skill provides instructions and shell commands in references/onboarding.md and scripts/onboarding.py to modify shell configuration files (~/.zshrc, ~/.bashrc) and Windows environment variables (setx) to persist the LINKFOX_AGENT_API_KEY for authentication.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes patent data from the Zhihuiya (PatSnap) API which is then ingested by the agent, creating a surface for potential indirect instructions.
  • Ingestion points: API response data processed in scripts/zhihuiya_patent_family.py.
  • Boundary markers: Absent; the data is printed to standard output or written to files for the agent's context without clear delimiters or warnings.
  • Capability inventory: The agent can execute local Python scripts and perform file system writes to the linkfox/ directory.
  • Sanitization: No explicit sanitization or filtering of external API content is performed before presentation to the agent.
  • [OBFUSCATION]: scripts/onboarding.py contains a hardcoded Base64-encoded string _LOGIN_FIXED_UID. Decoded value: {"a_id":"6a22c8b05bc916a","d_id":""}. This is used as a functional header value for login requests.
  • [COMMAND_EXECUTION]: The skill's documentation and scripts facilitate the execution of shell commands for environment configuration, such as setting persistent environment variables using setx or redirection operators (>>).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:11 AM