social-sbti
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
doctor.pyscript usessubprocess.callto executepip installandplaywright installcommands. This functionality is intended for automated environment setup and maintenance but represents a system modification surface. - [COMMAND_EXECUTION]: The
cli.pyscript utilizesos.execvto transition process control to thejike-authutility, which is part of the required authentication flow for the Jike platform. - [EXTERNAL_DOWNLOADS]: The skill's setup process involves downloading and installing the
jike-skilldependency directly from a public GitHub repository (MidnightDarling/jike-skill) rather than an official package registry or a verified organization repository. - [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes untrusted user-generated content from external social media platforms (Jike and X). This content is sampled and provided to the agent for scoring and analysis without robust technical isolation, potentially allowing maliciously crafted posts to influence the agent's behavior.
- Ingestion points: Social media posts fetched into JSON files in the
sbti-output/directory. - Boundary markers: The skill relies on natural language instructions in
SCORING_RUBRIC.mdandSKILL.mdto guide the agent; it does not employ technical delimiters or sanitization of the raw input data before it is read by the agent. - Capability inventory: System command execution (
subprocess,os.execv), local file system writes, and network operations. - Sanitization: Final card rendering uses HTML escaping via
html.escapeto prevent potential injection in the generated output files. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdinstructions utilize shell command substitution (e.g.,$(...)) to programmatically locate the skill's installation directory on the host system during initialization. - [DYNAMIC_EXECUTION]: The
src/twikit_patch.pyscript performs runtime monkey-patching of thetwikitlibrary's internal classes to ensure compatibility with changes in the X (Twitter) web platform's internal structure.
Audit Metadata