smart-search
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements normal vendor functionality for searching and reading personal documents. No malicious patterns, command injection, or unauthorized data exfiltration behaviors were found.- [INDIRECT_PROMPT_INJECTION]: The skill processes document content from the Yuque platform, which is an external data source. This is an expected behavior for a search skill.
- Ingestion points: Document content is ingested via the
yuque_get_doctool as defined in the Step 4 workflow ofSKILL.md. - Boundary markers: The skill does not explicitly define delimiters for retrieved content, but it specifies a rigid synthesis format for the final response.
- Capability inventory: The skill's capabilities are scoped to
yuque_searchandyuque_get_docwithin theyuque-mcpenvironment. - Sanitization: The instructions rely on natural language synthesis constraints without additional programmatic filtering of document content.
Audit Metadata