skills/xyaz1313/xyskill/xy-peer-pick/Gen Agent Trust Hub

xy-peer-pick

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a structured framework for analyzing competitor business models and is designed to help users identify successful business structures rather than just surface-level content.- [SAFE]: The skill utilizes a local Python script (atoms-search.py) to search a specialized knowledge base (stored in references/atoms.jsonl). The script is also capable of calling a vendor-managed API (api.xyskill.xyz) to fetch additional data, which represents legitimate functionality within the skill author's ecosystem.- [COMMAND_EXECUTION]: The skill executes the provided atoms-search.py script to perform keyword-based retrieval. This is a functional component of the skill intended to provide data-driven evidence for its analysis.- [INDIRECT_PROMPT_INJECTION]: The skill ingests user keywords for knowledge base searching. The potential for prompt injection is mitigated because the input is used as a search query within a script that only returns data snippets, and no high-privilege capabilities or dangerous tools are exposed to the resulting data flow.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:21 AM
Security Audit — agent-trust-hub — xy-peer-pick