uodo-grounding-pl
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute a shared citation-grounding engine using Node.js (node ../citation-grounding-pl/scripts/ground-citations.mjs). This execution pattern relies on a script located in a sibling skill directory, which is a standard architecture for this developer's suite of grounding tools. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external content from the
uodo.gov.plwebsite and PDF documents. While processing untrusted external data presents a theoretical injection surface, the skill incorporates explicit instructions for data residency and the use of thelet-it-beskill for pseudonymization to minimize risk. - [EXTERNAL_DOWNLOADS]: The skill fetches legal decisions, metadata, and PDF files from the official government domain
uodo.gov.pl. These network operations are strictly limited to official sources required for the skill's primary verification purpose.
Audit Metadata