zhongkao-physics

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill implements an automated publishing workflow in scripts/publish-quiz.md. It instructs the agent to execute shell commands (git add, git commit, and git push) to update the xingyun-New/Skills-XiaoSiMen repository on GitHub. This is a documented feature for distributing the generated educational content.
  • [EXTERNAL_DOWNLOADS]: The HTML template in references/html-template.md includes a remote script reference to https://xingyun-new.github.io/Skills-XiaoSiMen/lib/feishu-sync.js. This script is used for result synchronization and originates from the author's verified domain.
  • [DATA_EXFILTRATION]: The skill facilitates the submission of practice statistics (such as scores, accuracy, and time taken) to an external service via the FeishuSync integration. This behavior is transparently described as a progress-tracking feature for students and teachers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 11:28 AM
Security Audit — agent-trust-hub — zhongkao-physics