csp
Pass
Audited by Gen Agent Trust Hub on Jun 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestration script
scripts/source_search.pyusessubprocess.runto launch local Python sub-processes, such asmoegirl_api.py. This pattern is used to run multiple research agents in parallel to gather character data. The commands are constructed using a list of arguments, which prevents standard shell-based command injection.\n- [EXTERNAL_DOWNLOADS]: The componentscripts/moegirl_api.pyconnects to the Moegirlpedia API (zh.moegirl.org.cn) usingurllibto fetch character lore and transcripts. This is a well-known community service for anime and game data, used here to provide factual grounding for character distillation.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by retrieving untrusted text from external wikis and storing it in thereferences/research/directory. This content is later analyzed by the AI to generate behavior instructions. Maliciously crafted wiki entries could potentially influence the agent's behavior during the distillation process, despite the presence of quality checks.
Audit Metadata