xy-content-scan
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Retrieves diagnostic insights and project-specific knowledge from the vendor's official API endpoint at
api.xyskill.xyz. This operation is a core functional requirement to ensure the agent uses the most current content strategy data. - [COMMAND_EXECUTION]: Invokes a local Python utility script (
atoms-search.py) to process search queries and rank diagnostic results. The execution is limited to the script's internal logic for keyword matching and does not interact with sensitive system resources. - [INDIRECT_PROMPT_INJECTION]: Ingests and evaluates untrusted user-supplied content, such as marketing drafts and video scripts.
- Ingestion points: Processes user-provided text drafts, topics, and scripts during the Phase 1 and Phase 3 diagnostic stages.
- Boundary markers: The instructions define a rigid multi-phase analysis framework that prioritizes structured evaluation over open-ended content generation.
- Capability inventory: Limited to executing the local search script and performing authenticated network requests to the vendor's API.
- Sanitization: User input is parsed as search terms for keyword analysis and is not interpreted as executable commands or system instructions.
Audit Metadata