zsxq-user
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
zsxq-clibinary to perform queries against the Knowledge Planet API, mapping shortcuts like+infoand+footprintsto specific CLI commands. - [DATA_EXPOSURE]: Accesses personal information including user IDs, account statuses, and geographic location from the platform. This data is intended for display to the user and no unauthorized exfiltration patterns were detected.
- [PROMPT_INJECTION]: The skill processes user-generated content (post summaries and titles) retrieved via the
+footprintscommand, which presents a surface for indirect prompt injection. - Ingestion points: Output from
zsxq-cli user +footprintscontaining topic digests and titles from the ZSXQ platform. - Boundary markers: Absent; the agent is instructed to read the CLI output directly without specific delimiters or warnings about embedded instructions.
- Capability inventory: The agent has the capability to execute shell commands via
zsxq-cliand access various platform APIs. - Sanitization: Absent; no validation or escaping of the retrieved content is performed before the agent processes it.
Audit Metadata