ecommerce-patent-legal-status-data
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script to handle API interactions and data storage.
- Evidence:
python scripts/patent_legal_status_data.pyis invoked to query the database and process results. - [EXTERNAL_DOWNLOADS]: The skill fetches patent data from a remote proxy service.
- Evidence: The script uses
urllib.requestto perform POST requests to${NEXSCOPE_PROXY_BASE}/api/v1/tools/research/zhihuiya/legalStatus. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from the external PatSnap database, which constitutes an ingestion surface for untrusted content.
- Ingestion points: Patent legal status and event data returned by the API in
scripts/patent_legal_status_data.py. - Boundary markers: None identified in the prompt interpolation process.
- Capability inventory: The skill can write files to the project directory and execute CLI commands.
- Sanitization: No explicit sanitization or filtering of the external patent data is performed before presenting it to the agent.
Audit Metadata