content-hydration
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a pre-existing script (
scripts/hydrate.py) or generate a new Python script based on provided patterns to automate data enrichment. - [EXTERNAL_DOWNLOADS]: The implementation patterns utilize the
requestslibrary to fetch content from Reddit permalinks via the.jsonextension trick. It implements several security and reliability best practices: - Explicit
timeout=15parameters to prevent hanging processes. - Exponential backoff and jitter to respect remote server rate limits.
- Local disk caching to minimize redundant network requests.
- Defined User-Agent headers to ensure transparent identification.
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by design, as it ingests and processes external content from the web which is then stored for downstream analysis.
- Ingestion points: Data is ingested from CSV files containing Reddit permalinks and subsequently from the external URLs themselves within
SKILL.mdcode patterns. - Boundary markers: None are present in the provided templates to distinguish between fetched data and agent instructions.
- Capability inventory: The skill uses network operations (
requests.get) and filesystem operations (writing todata/andcheckpoints/). - Sanitization: The patterns do not include sanitization for the fetched body text, as its primary purpose is faithfully reconstructing context.
Audit Metadata