voting-status
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches voting metadata (emoji reactions) from the official pollinations/pollinations GitHub repository. This is a standard data retrieval operation from a well-known and trusted service.
- [COMMAND_EXECUTION]: Uses designated MCP tools (mcp1_get_issue, mcp1_add_issue_comment, mcp0_discord_send) for its core workflow. These interactions are limited to predefined API functions and do not include high-risk shell command execution.
- [DATA_EXFILTRATION]: Transmits summarized voting reports to specific Discord channels and GitHub issues. These destinations are clearly documented within the skill and align with its primary purpose of community reporting.
- [PROMPT_INJECTION]: No behavioral overrides or safety bypass attempts were detected. The instructions are focused on formatting and data processing.
- [SAFE]: The skill presents a low risk for indirect prompt injection due to its structured data processing.
- Ingestion points: GitHub issue reaction counts extracted via mcp1_get_issue.
- Boundary markers: The output is strictly formatted within an ASCII art template and wrapped in Markdown code blocks.
- Capability inventory: GitHub issue commenting and Discord message sending capabilities.
- Sanitization: The workflow extracts numerical reaction counts rather than free-text, significantly limiting the surface for malicious instruction injection from external data.
Audit Metadata