last30
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes large volumes of untrusted data from various external platforms, which is a standard surface for indirect prompt injection attacks.
- Ingestion points: External data is fetched from Reddit, X/Twitter, Hacker News, Polymarket, and general web results in steps 2 through 6.
- Boundary markers: The skill includes a specific security section in step 6 instructing the agent to treat fetched content as untrusted and to discard any sources containing directives like "ignore previous instructions" or role-play overrides.
- Capability inventory: The skill employs shell utilities (
bash,curl,jq) for data processing and has the ability to read/write to the agent's memory and output directories. - Sanitization: The instructions implement a proactive filtering step to identify and neutralize malicious directives within the processed data.
- [COMMAND_EXECUTION]: The skill uses standard command-line tools (
curl,jq,sed,tr,date) to perform its research logic. These commands are used for parameter parsing, data retrieval, and formatting the final report within the agent's environment. - [EXTERNAL_DOWNLOADS]: The skill initiates network connections to well-known and reputable services, including Reddit, X.AI, Hacker News (via Algolia), and prediction markets (Polymarket and Kalshi). These external references are legitimate and necessary for the skill's primary function of social research.
Audit Metadata