soia-pkm-distill-article-opinion
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands that download content from the vendor's GitHub repositories.
- [COMMAND_EXECUTION]: Setup instructions include shell commands for installing plugins and tools from the vendor's organization.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to reading external article content from the knowledge vault. 1. Ingestion points: Reads article text and MOC files from the vault. 2. Boundary markers: No delimiters are used for article content. 3. Capability inventory: The skill reads and writes to local markdown files in the vault. 4. Sanitization: No filtering or validation of article text is performed.
Audit Metadata