crosspost
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the analyzed files.
- [DATA_EXFILTRATION]: The skill includes code snippets that perform network operations to
api.postbridge.io(Postbridge), a social media management API. This functionality is documented and strictly aligned with the skill's stated purpose. Postbridge is a well-known service for this functionality. - [CREDENTIALS_UNSAFE]: The skill correctly implements credential management by utilizing environment variables (
POSTBRIDGE_API_KEY) in its API examples, which is a security best practice for managing secrets. - [PROMPT_INJECTION]: As the skill is designed to process and adapt user-provided content, it possesses an inherent indirect prompt injection surface.
- Ingestion points: The agent ingests user-supplied 'Source Content' as described in
SKILL.md(Workflow Step 1). - Boundary markers: No specific delimiters or safety instructions are defined to separate user content from system instructions during the adaptation process.
- Capability inventory: The skill can perform network operations via the
requestslibrary and interact with platform-specific APIs (e.g.,x-api). - Sanitization: No explicit content validation or sanitization routines are implemented for the adapted content.
Audit Metadata