knowledge-absorber

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/content_ingester.py implements an automatic dependency installer that executes pip install -r requirements.txt if required Python modules are missing from the current environment.
  • [DYNAMIC_EXECUTION]: The scripts/content_ingester.py script utilizes os.execv to perform a process replacement, effectively restarting itself once the dependency installation is complete to ensure the new packages are loaded.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to arbitrary user-provided URLs using the requests and DrissionPage libraries to ingest content for analysis and verify facts against live web data.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted content from external URLs, PDFs, Word documents, and images (via OCR). This data is subsequently processed by the scripts/run_full_pipeline.py script and interpolated into prompts for LLM generation. The skill mitigates this risk by using specific delimiters and sanitizing content through HTML cleaning in scripts/content_ingester.py.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 10:51 PM