generate-social-media-captions
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and text-based prompt templates. It does not include any executable scripts (.py, .js, .sh), configuration files, or external tool invocations.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points for untrusted data where users are prompted to insert milestones, news, or core details into the
Multi-Platform Announcement Matrixtemplate. - Ingestion points: Variables
[NEWS / MILESTONE / LESSON LEARNED]and[INSERT CORE DETAILS & KEY METRIC]inSKILL.md. - Boundary markers: The template lacks explicit delimiters or instructions for the agent to ignore embedded commands in the user-provided data.
- Capability inventory: The skill possesses no capabilities for command execution, file system access, or network operations.
- Sanitization: There is no evidence of sanitization or validation of the input data. However, given the lack of dangerous capabilities, the risk of exploitation is negligible.
Audit Metadata