trace-technology-evolution-rd
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill instructions emphasize secure practices, such as cautioning against exposing confidential data to external services without authorization.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by ingesting data from external patent and literature searches. However, this risk is effectively mitigated by the bundled rendering scripts (
render_forest.pyandrender_mindmap.py), which implement input validation, HTML escaping, and a safety check that explicitly blocks the generation of HTML containing<scripttags. - [COMMAND_EXECUTION]: The skill utilizes local Python scripts to transform reviewed JSON data into HTML visualizations. These scripts are limited to standard library modules, perform strictly validated parsing, and do not use untrusted data to construct shell commands or perform unsafe dynamic execution.
- [DATA_EXPOSURE]: The skill refers to verified patent research tools and documentation hosted on official vendor domains (patsnap.com). No hardcoded credentials, sensitive file paths, or unauthorized data exfiltration mechanisms were detected.
Audit Metadata