drama-quality-assessment
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external analytics data from ThinkingEngine to perform quality assessments and generate AI-driven diagnoses. This represents an indirect prompt injection surface as the agent processes data from external systems.
- Ingestion points: Data is retrieved via
ae-clicommands inreferences/steps/02_query_data.mdand processed by the AI inreferences/steps/04_diagnose.md. - Boundary markers: The skill implements strong process boundaries by requiring explicit user confirmation of the drama name and analysis scope in
references/steps/01_parse_config.mdbefore any data operations occur. - Capability inventory: The skill utilizes
ae-clifor data retrieval and has the capability to export reports to Feishu documents usinglark-docandlark-baseskills. - Sanitization: The diagnosis logic in
references/steps/04_diagnose.mdis strictly constrained by a local pattern library (references/anomaly_patterns.md), which limits the influence of external data on agent behavior. - [EXTERNAL_DOWNLOADS]: The skill references and interacts with ThinkingEngine (a well-known analytics service) and Feishu (Lark) for report generation. These integrations are essential to the skill's primary analytical purpose.
- Evidence: The skill uses the
ae-clitool (adapter defined inreferences/adapters/ae-cli.md) to fetch drama performance metrics from ThinkingEngine projects. - Integrations: It provides optional export functions to Feishu (
lark-doc,lark-base) as detailed inreferences/steps/05_generate_report.md. - [COMMAND_EXECUTION]: The skill uses
ae-clito execute data queries. These commands are constrained to analytical metadata and ad-hoc query models. - Evidence: Command patterns are strictly defined in
references/adapters/ae-cli.mdand involve operations likeae-cli analysis adhoc runandae-cli analysis-meta event list. - Safety: The skill prohibits guessing command names or parameters, requiring they be sourced from technical metadata retrieved at runtime.
Audit Metadata