maifang-goufang-bikeng-zhinan
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of static Markdown documentation providing advice on real estate purchasing, apartment selection, and home renovation. No executable code, scripts, or automation tools are included across the 33 analyzed files.
- [NO_CODE]: There are no programming language files (such as Python, JavaScript, or Shell scripts) or configuration files for dependency management (like package.json or requirements.txt). The skill relies entirely on information retrieval from local Markdown files.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No network operations (e.g., curl, wget, fetch), sensitive file path references (e.g., .ssh, .aws, .env), or hardcoded credentials were detected. The skill does not possess the capability to exfiltrate data.
- [OBFUSCATION]: The content was scanned for hidden markers, zero-width characters, and malicious encoding. No such patterns were found. The use of extended CJK characters in file ref-028.md (e.g., U+2BACA in '二𫫇英') was verified as a legitimate chemical term for Dioxin and not an attempt at obfuscation.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process user queries, it lacks any high-privilege tools or dangerous capabilities that could be exploited via malicious input. It functions as a restricted retrieval-augmented generation (RAG) tool for static advice.
Audit Metadata