skills/lulu-eva/eva-skill/eva-create/Gen Agent Trust Hub

eva-create

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as a content production coordinator with a focus on non-fiction media. It enforces strict 'no-fabrication' rules and requires human-in-the-loop verification for platform data (e.g., manually searching for trending titles rather than automated scraping).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external materials (user files, pasted text, screenshots). However, it includes a dedicated safety protocol (external-material-safety) to mitigate risks associated with processing third-party content. It also specifically warns against deceptive practices like plagiarism ('洗稿') or falsifying personal experiences.
  • [COMMAND_EXECUTION]: All referenced tools and files are accessed through local relative paths within the skill's defined environment (e.g., ../eva-shared/). There are no attempts to execute unauthorized system commands or external scripts.
  • [DATA_EXFILTRATION]: No network operations (curl, wget, etc.) or hardcoded credentials were found. Data flow is restricted to internal asset management and user interaction within the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 04:53 AM