ziniao-skill-maker
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the 'ziniao-cli' binary and provides numerous examples for its use in interacting with APIs, querying department and staff data, and invoking various system tools.
- [PROMPT_INJECTION]: The skill documentation and provided templates use imperative language such as 'CRITICAL' and 'MUST' to ensure that the agent loads shared configuration files. While these keywords are often seen in prompt injection attempts, here they are used appropriately for defining structural dependencies and context management in a development workflow.
Audit Metadata