anibon-world-identity
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs several automated downloads to bootstrap local game databases.
scripts/fetch_fgo_db.pydownloads Fate/Grand Order data fromapi.atlasacademy.io.scripts/fetch_ygo_db.pydownloads Yu-Gi-Oh! card information fromdb.ygoprodeck.com.scripts/fetch_pokemon_db.pyfetches species data from GitHub repositories.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted external sources, creating a surface for indirect prompt injection.
- Ingestion points: The script
scripts/fetch_story_ref.pyretrieves search result snippets from DuckDuckGo, andscripts/align_ref_timeline.pyparses text from external SRT subtitle files and JSON chunks. - Boundary markers: Absent. The skill does not implement delimiters or specific instructions to ensure the agent ignores natural language commands that might be embedded in the fetched synopses or subtitles.
- Capability inventory: The skill is designed to execute shell commands (
yt-dlp, local Python scripts) and perform network requests viaurllib. - Sanitization: Absent. The skill extracts names and text directly from external sources for mapping without validation or filtering for prompt injection markers.
- [COMMAND_EXECUTION]: The
SKILL.mdinstructions explicitly guide the agent to execute shell commands, includingyt-dlpfor subtitle extraction and several Python scripts for database management and timeline alignment.
Audit Metadata