ae-community
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as community posts, comments, and WeCom chat logs through various search and detail retrieval commands.
- Ingestion points: External data is ingested via retrieval commands defined in
references/search_posts.md,references/get_post_detail.md, andreferences/community-chat-analysis.md. - Boundary markers: The skill utilizes structured report templates (e.g., in
references/community-daily-report.md) but does not specify explicit prompt delimiters for raw user content. - Capability inventory: The skill uses the
ae-clitool to perform read operations and write operations, including reporting data to external endpoints viaae-cli community data report. - Sanitization: The skill provides clear instructions for filtering content, such as removing emoticons or system messages (e.g., in
references/community-analyzing-theme-comment.md), and guidelines for masking sensitive identifiers like user IDs and phone numbers (inreferences/community-chat-analysis.md).
Audit Metadata