ministry-news-daily
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include the execution of local Python scripts to handle document formatting and structure validation.
- Evidence:
python3 src/scripts/generate_docx.pyis used to export Markdown to Word format. - Evidence:
src/scripts/check_sections.py reportis used to verify the report structure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external websites, which represents an attack surface for instructions hidden within the crawled data.
- Ingestion points:
WebSearchandWebFetchare used to collect data fromwww.gov.cnand various Chinese ministry websites as defined in the 'Default Flow' section ofSKILL.md. - Boundary markers: The skill includes specific verification steps ('核实') and mandates that instructions in
doc-type-guardrails.mdmust be followed to prevent fabrication. - Capability inventory: The skill possesses file writing capabilities and the ability to execute local Python scripts based on gathered information.
- Sanitization: No explicit technical sanitization of web content is mentioned, although the skill instructs the agent to only record verified facts and avoid fabrication.
Audit Metadata