tianchuan-perspective
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/download_subtitles.shthat executes shell commands and spawns subprocesses foryt-dlpandfindto handle research data collection. The Python scriptscripts/merge_research.pyperforms standard file system operations to aggregate research notes. - [EXTERNAL_DOWNLOADS]: The script
scripts/download_subtitles.shuses theyt-dlputility to download content from external video platforms. These downloads target well-known media and social platforms for research purposes. - [INDIRECT_PROMPT_INJECTION]: The skill's 'Tianchuan-style research' workflow involves ingesting data from the
WebSearchtool, which presents a surface for indirect prompt injection from external websites. - Ingestion points: External data is ingested via the
WebSearchtool in the research step defined inSKILL.md. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions for the data retrieved via the search tool.
- Capability inventory: The skill package includes local shell and Python scripts for file management and command execution.
- Sanitization: No specific sanitization or filtering protocols are mentioned for the content retrieved from external searches before it is incorporated into the agent's analysis.
Audit Metadata