xy-peer-pick
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured framework for analyzing competitor business models and is designed to help users identify successful business structures rather than just surface-level content.- [SAFE]: The skill utilizes a local Python script (
atoms-search.py) to search a specialized knowledge base (stored inreferences/atoms.jsonl). The script is also capable of calling a vendor-managed API (api.xyskill.xyz) to fetch additional data, which represents legitimate functionality within the skill author's ecosystem.- [COMMAND_EXECUTION]: The skill executes the providedatoms-search.pyscript to perform keyword-based retrieval. This is a functional component of the skill intended to provide data-driven evidence for its analysis.- [INDIRECT_PROMPT_INJECTION]: The skill ingests user keywords for knowledge base searching. The potential for prompt injection is mitigated because the input is used as a search query within a script that only returns data snippets, and no high-privilege capabilities or dangerous tools are exposed to the resulting data flow.
Audit Metadata