social-sbti

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The doctor.py script uses subprocess.call to execute pip install and playwright install commands. This functionality is intended for automated environment setup and maintenance but represents a system modification surface.
  • [COMMAND_EXECUTION]: The cli.py script utilizes os.execv to transition process control to the jike-auth utility, which is part of the required authentication flow for the Jike platform.
  • [EXTERNAL_DOWNLOADS]: The skill's setup process involves downloading and installing the jike-skill dependency directly from a public GitHub repository (MidnightDarling/jike-skill) rather than an official package registry or a verified organization repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes untrusted user-generated content from external social media platforms (Jike and X). This content is sampled and provided to the agent for scoring and analysis without robust technical isolation, potentially allowing maliciously crafted posts to influence the agent's behavior.
  • Ingestion points: Social media posts fetched into JSON files in the sbti-output/ directory.
  • Boundary markers: The skill relies on natural language instructions in SCORING_RUBRIC.md and SKILL.md to guide the agent; it does not employ technical delimiters or sanitization of the raw input data before it is read by the agent.
  • Capability inventory: System command execution (subprocess, os.execv), local file system writes, and network operations.
  • Sanitization: Final card rendering uses HTML escaping via html.escape to prevent potential injection in the generated output files.
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md instructions utilize shell command substitution (e.g., $(...)) to programmatically locate the skill's installation directory on the host system during initialization.
  • [DYNAMIC_EXECUTION]: The src/twikit_patch.py script performs runtime monkey-patching of the twikit library's internal classes to ensure compatibility with changes in the X (Twitter) web platform's internal structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 11:55 AM