xiaohongshu-cover
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: CRITICALDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructions in
SKILL.mdexplicitly direct users to visit a URL (https://chatgpt-plus.top/list/#/home) that has been flagged by security scanners as a phishing site, which presents a direct risk of credential theft. - [EXTERNAL_DOWNLOADS]: The script
scripts/generate.pyis configured to download image data from URLs returned by an external API. The default endpointhttps://tryallapi.com/v1is an untrusted third-party gateway. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied product information and images, interpolating them into generative prompts without sanitization or boundary markers. This creates an attack surface where adversarial content in the input could override agent instructions.
Recommendations
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata