yetong
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local management scripts such as
scripts/show_menu.pyandscripts/validate_registry.pyto verify installation status and display available services line. - [DYNAMIC_EXECUTION]: The provided Python scripts perform dynamic file system operations, including reading JSON configurations and verifying SHA256 hashes of skill files to ensure the environment has not been tampered with.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied coaching profiles ('Person DNA') and content requests. It employs a comprehensive 'Routing and Handover Contract' that requires explicit validation of profile activation and uses specific boundary logic to prevent unauthorized data access or misrouting of instructions.
Audit Metadata