tiangong-kb-course-fulltext-fetch
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes the Tiangong AI CLI via
npx @tiangong-ai/cli@latest. Input parameters such asdocument_idandtagsare extracted usingjqand passed to the CLI using Bash array expansion, which safely handles arguments and prevents shell injection. - [DATA_EXPOSURE]: The skill provides a mechanism to load environment variables from a local file via the
env_fileparameter. The script implements a restrictive parser that validates environment keys against a specific regex (^[A-Za-z_][A-Za-z0-9_]*$) and skips malformed lines, adhering to safe configuration management practices.
Audit Metadata