jinko-task-export-to-matlab
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (ZIP bundles and Excel workbooks) downloaded from the Jinkō platform, which creates an ingestion point for potentially untrusted content.
- Ingestion points: ZIP bundles downloaded from the
jinko.aiAPI and extracted to/tmp/jinko-to-matlab/as described inscripts/jinko_matlab_parity.py. - Boundary markers: Not explicitly defined in instructions, as the data is processed programmatically rather than interpolated directly into LLM prompts.
- Capability inventory: The skill can read/write files and perform network operations via the
jinko-sdkas implemented inscripts/jinko_matlab_parity.py. - Sanitization: The skill implements strong security measures, including a
safe_extract_zipfunction that explicitly prevents path traversal (Zip Slip) and symbolic link attacks, and usesyaml.safe_loadfor configuration files. - [SAFE]: The skill's external dependencies (the
jinkoPython SDK) and network communications (jinko.ai) are legitimate vendor resources belonging to Nova In Silico.
Audit Metadata