xhs-profile
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and displays user-generated content, such as biographies and note descriptions, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data is ingested through the
user_profiletool which returns profile details and note lists from the Xiaohongshu platform (SKILL.md). - Boundary markers: There are no explicit delimiters or instructions to the agent to ignore or isolate the fetched content from its own instructions.
- Capability inventory: The skill is configured to call an external tool and present its text-based output to the user.
- Sanitization: No sanitization, filtering, or validation of the retrieved text content is mentioned in the skill instructions.
- [NO_CODE]: This skill consists solely of markdown documentation and metadata and does not include any scripts or executable code.
Audit Metadata