yetong-copy
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script (
scripts/check_profile.py) to validate the structure and activation status of the user's 'person-dna.md' profile. The script performs local regex-based validation and does not exhibit any malicious behavior such as network communication or unauthorized file modification. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided content via 'person-dna.md' and selected topics.
- Ingestion points: Data enters through the
person-dna.mdfile and user topic inputs as described inSKILL.md. - Boundary markers: The skill establishes clear boundaries in
references/voice-and-evidence.md, instructing the agent to only read explicitly specified files and to maintain a distinction between user facts and instructional frameworks. - Capability inventory: The skill is limited to text generation and lacks dangerous capabilities such as network access or file-system write permissions.
- Sanitization: The
scripts/check_profile.pyutility validates the structural integrity and activation status of the profile before the agent processes the content.
Audit Metadata