alterlab-pra-social-content
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from external sources and project files, creating a surface for indirect prompt injection attacks.
- Ingestion points: The skill explicitly instructs the agent to "Search the web for trending formats, platform algorithm updates..." and "Read existing project files for context — brand guidelines, prior content calendars..."
- Boundary markers: The instructions do not define boundary markers or provide specific guidance to the agent to ignore instructions embedded within the data it retrieves.
- Capability inventory: The skill possesses the capability to write structured markdown files (
{project}-content-calendar.md, etc.) to the local project directory based on the ingested data. - Sanitization: There are no instructions for sanitizing, validating, or escaping content retrieved from web searches or project files before it is processed by the agent.
Audit Metadata