jinko-output-set
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill's instructions and associated Python scripts are focused on legitimate operations within the Jinkō platform ecosystem. No malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms were detected.
- [INDIRECT_PROMPT_INJECTION]: Several scripts provide the capability to ingest data from local JSON files, creating an attack surface for indirect prompt injection if those files were to contain malicious instructions.
- Ingestion points: The
--from-jsonargument inscripts/create_advanced_output_set.pyand the--add-objective-jsonargument inscripts/edit_advanced_output_set.pyread content from specified file paths. - Boundary markers: The data is ingested as structured JSON, which provides inherent separation from executable logic.
- Capability inventory: Ingested data is used as parameters for Jinko SDK calls to create or modify scoring designs.
- Sanitization: The
load_components_from_jsonandload_objective_jsonfunctions perform comprehensive validation of the JSON schema, including type checking for every field and verifying numeric constraints (e.g., wide/narrow range ordering and positive weight values) before any SDK operations are performed. - [EXTERNAL_DOWNLOADS]: The skill references and requires the
jinko-sdklibrary and thejinko-sdk-setupskill. These are vendor-owned resources from Nova In Silico designed for secure integration with their platform.
Audit Metadata