tianchuan-perspective

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a utility script scripts/download_subtitles.sh that executes shell commands and spawns subprocesses for yt-dlp and find to handle research data collection. The Python script scripts/merge_research.py performs standard file system operations to aggregate research notes.
  • [EXTERNAL_DOWNLOADS]: The script scripts/download_subtitles.sh uses the yt-dlp utility to download content from external video platforms. These downloads target well-known media and social platforms for research purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill's 'Tianchuan-style research' workflow involves ingesting data from the WebSearch tool, which presents a surface for indirect prompt injection from external websites.
  • Ingestion points: External data is ingested via the WebSearch tool in the research step defined in SKILL.md.
  • Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions for the data retrieved via the search tool.
  • Capability inventory: The skill package includes local shell and Python scripts for file management and command execution.
  • Sanitization: No specific sanitization or filtering protocols are mentioned for the content retrieved from external searches before it is incorporated into the agent's analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 03:07 PM