linkfox-zhihuiya-retrieval-patent-search
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes patent information retrieved from the Zhihuiya database. Ingestion points: External patent data is ingested through the
zhihuiya_query_search_patent.pyscript. Boundary markers: TheSKILL.mdfile contains explicit instructions for the agent to render this data in a structured table format. Capability inventory: The skill maintains network access to vendor APIs and writes results to the local filesystem for logging and caching. Sanitization: Data is handled through standard JSON parsing and field extraction. - [PERSISTENCE]: The skill's onboarding documentation (
references/onboarding.md) provides instructions for persisting API keys by adding export commands to shell profiles like~/.zshrcand~/.bashrc. This is documented behavior for maintaining the authentication state required for the tool to function.
Audit Metadata