jeesite
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manifest (SKILL.md) instructs the agent to execute a bundled Python script,
scripts/cache_docs.py, to retrieve content for specific documentation topics. - [EXTERNAL_DOWNLOADS]: The
cache_docs.pyscript fetches HTML and images fromhttps://jeesite.com. As this is the official domain for the product being documented by the skill author, these downloads are considered legitimate. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: External HTML content is retrieved from
jeesite.comand processed into Markdown for the agent (documented in allSKILL.mdfiles underreferences/). - Boundary markers: The instructions define how the agent should utilize the documents but do not implement strict prompt delimiters to separate external content from instructions.
- Capability inventory: The skill includes script execution, local file writing (for caching), and network access to fetch documentation.
- Sanitization: The processing script includes a
clean_htmlfunction to strip navigation and UI elements and employs thehtml2textlibrary to ensure clean Markdown output.
Audit Metadata