stock
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill references official installation scripts using piped shell commands (
curl | shandiwr | iex) fromhttps://open.longbridge.com. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external content from news and community topics, creating an indirect prompt injection surface.
- Ingestion points:
longbridge news,longbridge topic,ctx.news(),ctx.topics(), andlongbridge.com/en/news.md. - Boundary markers: No specific delimiters or instructional guardrails are described for the agent when processing this data.
- Capability inventory: Includes network access and CLI command execution.
- Sanitization: No sanitization logic for fetched content is mentioned in the references.
Audit Metadata