etsy-tony-full-erank-listing
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
gemini_client.pyscript is configured to communicate withhttps://clawlist.best/v1, a non-standard and unverified third-party API endpoint for model invocations. - [METADATA_POISONING]: The
SKILL.mdfile contains social engineering patterns by instructing users to search for a specific Douyin (TikTok) ID93440780745and contact the author for 'Skills' instructions or help. - [INDIRECT_PROMPT_INJECTION]: The skill lacks sanitization when ingesting external product data and eRank research results in
run_pipeline.py, creating a vulnerability surface where malicious content in processed data could influence the agent's behavior. - Ingestion points: Product facts are loaded from
request.jsoninrun_pipeline.py; keyword data is loaded from eRank CSV/JSON exports innormalize_erank_export.py. - Boundary markers: None identified in the prompt templates (
intent_prompt,listing_prompt). - Capability inventory: Network operations (
gemini_client.py), file writing (run_pipeline.py), and external command execution (SKILL.mdreferences tocli_anything). - Sanitization: Content is parsed as JSON but not sanitized or escaped for prompt safety.
- [COMMAND_EXECUTION]: The skill references and executes commands from an external toolset (
cli_anything.erank) and expects a specific directory structure (../etsy-tony-full-erank-tools/harness) that is not part of the skill distribution.
Audit Metadata