content-hydration

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute a pre-existing script (scripts/hydrate.py) or generate a new Python script based on provided patterns to automate data enrichment.
  • [EXTERNAL_DOWNLOADS]: The implementation patterns utilize the requests library to fetch content from Reddit permalinks via the .json extension trick. It implements several security and reliability best practices:
  • Explicit timeout=15 parameters to prevent hanging processes.
  • Exponential backoff and jitter to respect remote server rate limits.
  • Local disk caching to minimize redundant network requests.
  • Defined User-Agent headers to ensure transparent identification.
  • [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by design, as it ingests and processes external content from the web which is then stored for downstream analysis.
  • Ingestion points: Data is ingested from CSV files containing Reddit permalinks and subsequently from the external URLs themselves within SKILL.md code patterns.
  • Boundary markers: None are present in the provided templates to distinguish between fetched data and agent instructions.
  • Capability inventory: The skill uses network operations (requests.get) and filesystem operations (writing to data/ and checkpoints/).
  • Sanitization: The patterns do not include sanitization for the fetched body text, as its primary purpose is faithfully reconstructing context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 05:08 AM
Security Audit — agent-trust-hub — content-hydration