company-research-analyst
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill mandates the use of shell commands to perform calculations. It specifically instructs the agent to use
Bashto callpython3 -corbcto execute mathematical expressions. This pattern involves spawning subprocesses via the command line. - [DYNAMIC_EXECUTION]: The skill generates and executes code at runtime. It requires the agent to transform natural language requirements into Python code or shell scripts for execution to ensure calculation accuracy.
- [PERSISTENCE]: The skill implements a manual persistence mechanism by writing research results to a local directory. It specifically targets the path
memory/entities/[公司简称].mdto store data across different sessions, allowing the agent to recall past research. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes data from untrusted external sources.
- Ingestion points: Data is ingested via the
web-searchtool and thesearchis-querytool (which reads internal documents and expert interviews). - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the data retrieved from external searches.
- Capability inventory: The skill possesses file writing capabilities (
Writetool) and command execution capabilities (bash,python3). - Sanitization: There is no explicit instruction to sanitize or validate external content before it is used in calculations or written to the persistence memory.
Audit Metadata