last30days
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources including Reddit comments, X posts, and web articles. This represents a potential indirect prompt injection surface where malicious instructions hidden in these sources could influence the agent's summary or behavior.
- Ingestion points: Data enters the context through
web_search,reddit_search(or Brave fallback),bird search, andweb_fetchoperations as defined in the workflow sections ofSKILL.mdandSKILL-OC.md. - Boundary markers: The skill uses clear Markdown headers in its output template to structure findings, but does not explicitly instruct the agent to ignore instructions embedded within the source text.
- Capability inventory: The skill is capable of network operations (
web_search,web_fetch,bird search) and file system access (copying the skill folder during installation). - Sanitization: No specific filtering or sanitization steps for the ingested content are mentioned; the skill relies on the agent's ability to synthesize and identify patterns from the raw data.
Audit Metadata