xy-playbook
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The helper script
scripts/atoms-search.pymakes network requests toapi.xyskill.xyzto perform knowledge retrieval. This is a legitimate functional component used to access the vendor's backend database for strategy atoms.- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute the local Python scriptscripts/atoms-search.pyto search for industry-specific data. This script uses standard Python libraries and performs lookups against local JSONL files or the vendor's API.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied industry, price, and status data as inputs for its deduction engine. It mitigates potential injection risks by using a highly structured phase-based workflow, mandatory output templates, and specific stopping rules to ensure user oversight during the process.
Audit Metadata