xy-precedent
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill includes a Python script
scripts/atoms-search.pythat makes network requests toapi.xyskill.xyz. This domain is a vendor-owned resource associated with the author 'xyaz1313' and is used to retrieve data from the XY case study library. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied business dilemmas and external data from a case study library. While this creates an attack surface for indirect prompt injection, the skill employs structured processing phases and specific output templates that act as boundary markers to mitigate risk.
- Ingestion points: User business dilemmas are ingested in Phase 1 of
SKILL.md. - Boundary markers: The skill uses structured Markdown tables and explicit phase-based instructions to delimit data.
- Capability inventory: The skill utilizes a local Python script
scripts/atoms-search.pyfor data retrieval and performs network operations to a vendor-controlled API. - Sanitization: The retrieval script uses standard JSON serialization and regex splitting for queries, rather than passing raw strings to a shell.
Audit Metadata