add
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local script (
look_tongji.py) located within the repository's directory structure to manage file imports. This is standard operational behavior for a tool-based skill. - [DATA_EXFILTRATION]: No network activity or unauthorized data transfer patterns were detected. The skill operates on local file paths provided during the workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface as it processes external file formats (PDF, DOCX, PPTX).
- Ingestion points: Files are provided via the
--materialflag in the CLI command described inSKILL.md. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: File copying, Markdown conversion via MarkItDown, and wiki indexing.
- Sanitization: None described within the skill instructions. While this represents a theoretical attack surface, it is consistent with the primary purpose of the skill and does not indicate malicious intent.
Audit Metadata