xy-biz-scan
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/atoms-search.pymakes network requests tohttps://api.xyskill.xyz/v1/atoms/searchto retrieve business diagnosis knowledge. This domain is managed by the vendorxyaz1313.\n- [COMMAND_EXECUTION]: The agent is instructed inSKILL.mdto execute the local Python scriptscripts/atoms-search.pyto query the knowledge base.\n- [DATA_EXFILTRATION]: The search script reads configuration data from~/.xy/config.jsonand transmits user-provided queries to the vendor's API. While this is functional for search, it involves processing user data on a remote server.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes business-related user input and uses it as search terms to fetch knowledge "atoms" that influence the agent's output.\n - Ingestion points: User input describing business problems is received in the
问诊(Consultation) and体检(Physical Exam) phases inSKILL.md.\n - Boundary markers: None identified in the tool invocation instructions.\n
- Capability inventory: Execution of local Python scripts (
python3) and network communication (urllib.request).\n - Sanitization: No explicit sanitization or input validation is performed on the user's query before it is passed to the search script.
Audit Metadata