ecommerce-patent-description-data
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves patent specification content from the Zhihuiya database, which is an external data source that could theoretically contain instructions designed to manipulate the agent.
- Ingestion points: External data is ingested through the API response processed in
scripts/patent_description_data.py. - Boundary markers: There are no explicit instructions or delimiters defined to isolate the fetched patent text or warn the agent to ignore embedded commands.
- Capability inventory: The skill executes a local Python script (
scripts/patent_description_data.py) which performs network operations viaurlliband writes JSON results to the filesystem. - Sanitization: The skill does not implement sanitization or filtering of the patent description content before it is displayed or stored.
Audit Metadata