chinese-copyright-application
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates document generation by executing system commands and scripts. It runs
scripts/analyze_and_generate_source.pyto perform project analysis and generates abuild_all.shshell script to invoke thexelatexcompiler. Documentation also includes environment setup procedures involving package managers likebreworapt, which may include the use ofsudofor system-level installations. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection through the ingestion of external data.
- Ingestion points: The Python analysis script reads and extracts content from all source files within a user-specified project directory.
- Boundary markers: Code content is encapsulated within LaTeX
Verbatimenvironments in the generated output. - Capability inventory: The agent has the capability to execute Python scripts, create directories, and run shell commands/scripts.
- Sanitization: The analysis script escapes specific LaTeX control sequences (like
\end{Verbatim}) to prevent document compilation errors, but it does not sanitize content against potential agent instructions embedded in project comments or file metadata.
Audit Metadata