discourse
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from third-party platforms including Hacker News, Lobsters, Reddit, and tech blogs, creating a surface for indirect prompt injection attacks where malicious content on those sites could attempt to influence the agent.
- Ingestion points: Data is retrieved from external websites and APIs using WebFetch and WebSearch as outlined in SKILL.md.
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill definition.
- Capability inventory: The skill employs network retrieval tools (WebFetch and WebSearch) to access external data.
- Sanitization: The instructions do not describe sanitization or filtering logic for the ingested community discussions.
- [SAFE]: The skill references and uses well-known services such as Algolia and Reddit for their intended data retrieval purposes.
Audit Metadata