social-media-manager
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script,
scripts/social_calendar_generator.py, to build and format social media content calendars. This script uses only standard libraries and does not perform network requests or write to the file system beyond stdout. - [INDIRECT_PROMPT_INJECTION]: The skill is configured to read branding and audience context from a local file (
.claude/product-marketing-context.md) and incorporate user-provided strategy details. While this introduces an injection surface for external content, the skill's actions are limited to generating planning artifacts and strategy recommendations, resulting in low exploitation risk.
Audit Metadata