knowledge-absorber
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/content_ingester.pyimplements an automatic dependency installer that executespip install -r requirements.txtif required Python modules are missing from the current environment. - [DYNAMIC_EXECUTION]: The
scripts/content_ingester.pyscript utilizesos.execvto perform a process replacement, effectively restarting itself once the dependency installation is complete to ensure the new packages are loaded. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to arbitrary user-provided URLs using the
requestsandDrissionPagelibraries to ingest content for analysis and verify facts against live web data. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted content from external URLs, PDFs, Word documents, and images (via OCR). This data is subsequently processed by the
scripts/run_full_pipeline.pyscript and interpolated into prompts for LLM generation. The skill mitigates this risk by using specific delimiters and sanitizing content through HTML cleaning inscripts/content_ingester.py.
Audit Metadata