linkfox-zhihuiya-retrieval-patent-search

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes patent information retrieved from the Zhihuiya database. Ingestion points: External patent data is ingested through the zhihuiya_query_search_patent.py script. Boundary markers: The SKILL.md file contains explicit instructions for the agent to render this data in a structured table format. Capability inventory: The skill maintains network access to vendor APIs and writes results to the local filesystem for logging and caching. Sanitization: Data is handled through standard JSON parsing and field extraction.
  • [PERSISTENCE]: The skill's onboarding documentation (references/onboarding.md) provides instructions for persisting API keys by adding export commands to shell profiles like ~/.zshrc and ~/.bashrc. This is documented behavior for maintaining the authentication state required for the tool to function.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:50 AM