creator-research-tracker
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/fetch_youtube_transcript.pyexecutes theyt-dlpcommand viasubprocess.runto extract transcripts from YouTube videos. Additionally,scripts/validate_contract.pyuses shell commands to execute and test internal scripts during the setup or validation process. - [EXTERNAL_DOWNLOADS]: The skill fetches data from external platforms including YouTube and X (Twitter) to generate daily research reports. This involves downloading transcripts and web content for processing.
- [PROMPT_INJECTION]: The skill processes untrusted data from external sources (tweets and transcripts), creating a surface for indirect prompt injection. However, this is mitigated by robust instructions in
SKILL.mdandreferences/research-bridge.mdwhich mandate that all findings be classified as 'source leads' requiring manual verification. The skill also explicitly prohibits the use of auto-translated UI text or unexpanded summaries as valid evidence. - Ingestion points:
scripts/fetch_x_daily.py(X/Twitter posts) andscripts/fetch_youtube_transcript.py(YouTube transcripts). - Boundary markers: The skill instructions require the agent to wrap findings in 'Source Leads' tables and include explicit 'requires-primary-check' caution labels.
- Capability inventory: The agent has the capability to write to the local research dossier (companies/, modules/, etc.) via
scripts/route_research_updates.py. - Sanitization: Basic text normalization is performed in
scripts/creator_tracker_lib.py, and the agent is instructed to manually verify claims against primary sources before updating the core research model.
Audit Metadata