crosspost

Pass

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified in the analyzed files.
  • [DATA_EXFILTRATION]: The skill includes code snippets that perform network operations to api.postbridge.io (Postbridge), a social media management API. This functionality is documented and strictly aligned with the skill's stated purpose. Postbridge is a well-known service for this functionality.
  • [CREDENTIALS_UNSAFE]: The skill correctly implements credential management by utilizing environment variables (POSTBRIDGE_API_KEY) in its API examples, which is a security best practice for managing secrets.
  • [PROMPT_INJECTION]: As the skill is designed to process and adapt user-provided content, it possesses an inherent indirect prompt injection surface.
  • Ingestion points: The agent ingests user-supplied 'Source Content' as described in SKILL.md (Workflow Step 1).
  • Boundary markers: No specific delimiters or safety instructions are defined to separate user content from system instructions during the adaptation process.
  • Capability inventory: The skill can perform network operations via the requests library and interact with platform-specific APIs (e.g., x-api).
  • Sanitization: No explicit content validation or sanitization routines are implemented for the adapted content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 4, 2026, 07:07 PM