ae-data-integration
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local files (CSV, JSON, Excel) and online Feishu/Lark documents, creating a surface for indirect prompt injection. Ingestion occurs in
references/source-inspect.mdandreferences/lark-bitable-source.mdusing theae-cliandlark-clitools. While the skill instructs the agent not to print raw values, it lacks explicit content sanitization to prevent the AI from following instructions embedded in the data.\n- [DYNAMIC_EXECUTION]: The skill generates and executes local Node.js, Python, and Shell scripts to facilitate reusable data transformation pipelines as described inreferences/handoff.md. For example,transform.mjsis generated based on confirmed mappings and subsequently executed usingnodeto process new data files. This behavior is inherent to the skill's primary purpose but represents a dynamic execution pattern.\n- [COMMAND_EXECUTION]: The skill relies on executing various CLI tools and generated scripts to perform its core functions, includingae-clifor Thinking Analytics,lark-clifor Feishu/Lark integration, and local interpreters for generated processing scripts. This is documented across multiple reference files likereferences/transform.mdandreferences/sink-upload.md.\n- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the@larksuite/clipackage from the official NPM registry to enable integration with online documents. This reference to a well-known service is documented inreferences/lark-bitable-source.mdandreferences/lark-sheet-source.md.
Audit Metadata