skills/yaojingang/geohub/geo-strategy/Gen Agent Trust Hub

geo-strategy

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/run_strategy.py) to process strategy requests. The script is executed via the bash shell as defined in the manifest and interface configuration.- [DYNAMIC_EXECUTION]: The execution script dynamically modifies the Python search path (sys.path) to include a local directory for importing the geo_seo_hub module. This is a common pattern for local tool development to reference internal libraries within the same project structure.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a file-backed JSON request. It mitigates risks by requiring explicit fidelity checks (risk, brand, constraint) and maintaining an offline boundary where all external evidence must be manually verified.- [SAFE]: The skill configuration explicitly forbids network access and autonomous execution of external actions, effectively minimizing the potential attack surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 02:49 PM
Security Audit — agent-trust-hub — geo-strategy