tidas-data-import
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill resolves and utilizes external skills at runtime via
npx skills usetargeting the vendor's repository athttps://github.com/tiangong-ai/skills. This is used to incorporate specialized research capabilities liketiangong-kb-sci-searchas described in the Source Document Authoring lane. - [REMOTE_CODE_EXECUTION]: The skill employs
npx skills useto download and execute code from the vendor's remote GitHub repository. While this represents a remote code execution pattern, the source is within the author's official namespace and the purpose is explicitly defined for academic research retrieval. - [COMMAND_EXECUTION]: The instructions rely on a series of shell commands and scripts to manage the data lifecycle, including
tiangong-lcaCLI invocations for dataset authoring and conversion, as well asnpmandnodescript calls for gating and finalization. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted documents such as PDFs, Excel files, and web exports to generate candidate data.
- Ingestion points: Path arguments provided to
tiangong-lca dataset authorandtiangong-lca dataset import-lcainSKILL.md. - Boundary markers: The agent is instructed to avoid retaining
__AI_FILL_*placeholders and to verify outputs against structured report artifacts. - Capability inventory: The skill can execute CLI tools, run Node.js scripts, and resolve remote skills via
npx. - Sanitization: The workflow includes multiple verification gates, including SDK validation, QA classification scripts, and a finalize wrapper that reruns rulesets and generates mutation manifests before any remote write occurs.
Audit Metadata