qianwen-find-skills
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local system using shell commands, including
qianwen skills searchfor discovering capabilities andqianwen skills installfor adding new skills. It also performs a preflight version check usingqianwen --versionto ensure compatibility.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation or update of the@qianwenai/qianwen-clipackage from the NPM registry when the tool is missing or outdated. This is an official vendor package required for the skill to operate.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external descriptions of published skills. It mitigates potential injection risks by instructing the agent to treat these descriptions as metadata only, while enforcing length and character restrictions on all search queries to prevent malicious interpolation into shell commands.\n - Ingestion points: Metadata and descriptions returned by the
qianwen skills searchcommand.\n - Boundary markers: Clear instructions in
SKILL.mdto disregard instructions within result descriptions.\n - Capability inventory: The skill has the ability to write to the filesystem via the installation command and access the network via the CLI.\n
- Sanitization: Input validation restricts queries to 80 characters and a specific set of safe characters (alphanumeric, spaces, and select symbols).
Audit Metadata