yetong

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local management scripts such as scripts/show_menu.py and scripts/validate_registry.py to verify installation status and display available services line.
  • [DYNAMIC_EXECUTION]: The provided Python scripts perform dynamic file system operations, including reading JSON configurations and verifying SHA256 hashes of skill files to ensure the environment has not been tampered with.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied coaching profiles ('Person DNA') and content requests. It employs a comprehensive 'Routing and Handover Contract' that requires explicit validation of profile activation and uses specific boundary logic to prevent unauthorized data access or misrouting of instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 01:45 PM