skills/reason-machines/security-skills/unisecurityguard-academic-whistleblower-archive/Gen Agent Trust Hub
unisecurityguard-academic-whistleblower-archive
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Bash and Python script templates (
backup_social_media.shandauto_archive.py) that use system commands such asgit,mkdir, andcp. It also utilizes the GitHub CLI (gh) for creating issues. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and document content from external social media platforms, creating a vulnerability surface where the agent might process malicious instructions embedded in that data.
- Ingestion points: Processes external content from social media platforms (e.g., Xiaohongshu) and local download folders in
backup_social_media.shandmonitor_platform.py. - Boundary markers: No specific delimiters or warnings for the agent to ignore instructions within the ingested content are present in the provided templates.
- Capability inventory: The skill utilizes file system operations (read/write), Git repository management, and GitHub API interactions.
- Sanitization: The scripts do not include explicit sanitization or filtering logic for the content being archived.
- [DYNAMIC_EXECUTION]: The Python script
auto_archive.pyusessubprocess.runto dynamically execute shell commands for file handling and Git version control based on runtime logic.
Audit Metadata