mingli
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'kerykeion' library from the Python Package Index (PyPI) for natal chart calculations.- [EXTERNAL_DOWNLOADS]: Fetches planetary position data from 'api.astronomyapi.com', which is recognized as a well-known technology service for astronomical data.- [COMMAND_EXECUTION]: Executes several local Python scripts via subprocess calls to perform various divination calculations (Ba-Zi, Numerology, I Ching).- [COMMAND_EXECUTION]: Implements persistence through the creation and management of daily cron jobs ('horoscope-daily-{username}') to automate the delivery of horoscopes to users.- [DATA_EXFILTRATION]: Transmits generated content to external users through the Telegram messaging service using 'telegram_actions'.- [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection (Category 8) due to its data processing flow.
- Ingestion points: User birth data, including name and location coordinates, are ingested during setup and stored in 'horoscope-users.md'.
- Boundary markers: The prompt template defined in 'references/horoscope-prompt-template.md' interpolates user data directly into the final instructions without explicit delimiters or escaping.
- Capability inventory: The skill possesses the ability to read from memory, execute local scripts, and perform network operations via Telegram.
- Sanitization: Scripts provide basic validation for dates and coordinates, but do not sanitize string inputs like names that are later interpolated into LLM prompts.
Audit Metadata