exampass
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
/exampass updatecommand instructions inSKILL.mddirect the agent to fetch code updates from the author's repository athttps://github.com/WUBING2023/ExamPass-Assistant.gitand install Python packages fromrequirements.txtusing pip. - [COMMAND_EXECUTION]: The skill's update mechanism involves the execution of multiple shell commands, including
git fetch,git pull, andpip install, to manage the skill's environment and source code. - [PROMPT_INJECTION]: The skill extracts text from user-provided PPTX, DOCX, and PDF files and processes it through specialized AI sub-agents, creating an indirect prompt injection surface.
- Ingestion points: Text is extracted in
scripts/extractor.pyandscripts/run_exampass.pyfrom external documents. - Boundary markers: Analysis of the sub-agent prompts in
agents/skeleton-agent.md,agents/notes-agent.md, andagents/item-agent.mdshows an absence of delimiters or specific instructions to disregard malicious commands embedded in the source text. - Capability inventory: The skill utilizes
scripts/template_engine.pyto write generated HTML files andscripts/run_exampass.pyto save intermediate data to the filesystem. - Sanitization: Extracted content is interpolated directly into agent prompts without sanitization or filtering to prevent instruction override.
Audit Metadata