skills/nexscope-ai/nexscope-ecommerce-skills/ecommerce-patent-claims-translation/Gen Agent Trust Hub
ecommerce-patent-claims-translation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill's behavior is consistent with its stated purpose of patent data retrieval.
- [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's API endpoint (
NEXSCOPE_PROXY_BASE) to fetch patent claim data. This is the primary function of the skill and uses official channels. - [COMMAND_EXECUTION]: The script
scripts/patent_claims_translation.pyperforms routine file system operations, including creating directories and writing JSON response files to the project'snexscopefolder and the user's home directory for caching. These operations are transparent and follow standard development practices. - [INDIRECT_PROMPT_INJECTION]: The skill ingests patent claim text from the API, which serves as a data entry point from an external source.
- Ingestion points: The
claimsfield from the API response inscripts/patent_claims_translation.py. - Boundary markers: No explicit safety delimiters are added to the raw script output, although the
SKILL.mddefines structured display rules for the agent. - Capability inventory: The skill possesses file-write and network-read capabilities through the included Python script.
- Sanitization: The retrieved patent text is passed to the agent without specific sanitization or filtering.
Audit Metadata