topic-agent
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local file system write operations. It specifies a hardcoded absolute path to save generated markdown files at
/Users/ugreen/Documents/obsidian/选题库/每日选题/MMDD-选题名称.md. This reveals a specific local username and directory structure. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its ingestion of untrusted external data.
- Ingestion points: The skill uses
WebSearchto fetch content from various external sources including Reddit, Product Hunt, and AI blogs as described in the '采集步骤' section ofSKILL.md. - Boundary markers: The instructions do not define clear delimiters or warnings to differentiate between the retrieved web content and the agent's core instructions.
- Capability inventory: The agent has the capability to write files to the local filesystem at a specified path defined in
SKILL.md. - Sanitization: There is no evidence of sanitization, validation, or filtering of the external content before it is processed and written to the local storage.
Audit Metadata