social-quality-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to resolve the repository root directory using the
git rev-parse --show-toplevelcommand to configure environment variables during initialization. - [DYNAMIC_EXECUTION]: The skill utilizes a local Python script,
validate-audit-artifact.py, to perform schema validation and integrity checks on audit results before they are persisted to the filesystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes external social media asset packages and channel portfolios. This ingestion of untrusted data creates a surface for indirect prompt injection, where malicious content might attempt to manipulate the audit outcome. However, the skill provides structural defenses by enforcing the ECHO scoring framework and specific veto criteria.
- [EXTERNAL_DOWNLOADS]: The skill contains links to its official GitHub repository for documentation and reference. These references target a well-known service and the author's official infrastructure, following standard development practices.
Audit Metadata