nuyoah-xiezhen-prompt
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to manage its own lifecycle (listing, updating, and re-installing) using the
npx skillscommand-line utility. These commands are restricted to the skill's specific package name and are designed to be executed only upon explicit user request for an update or version check. - [EXTERNAL_DOWNLOADS]: The skill's update mechanism fetches content from its official GitHub repository (
nuyoah-ai-works/nuyoah-xiezhen-prompt) through the platform's standard package manager. The instructions explicitly forbid the use of unverified one-click scripts orcurl | bashpatterns, demonstrating a focus on security best practices. - [SAFE]: No evidence of prompt injection, data exfiltration, or malicious persistence was found. The skill operates within its defined scope of photography prompt engineering and image analysis.
Audit Metadata