google-social-media-finder
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python scripts via the shell to generate JavaScript code used for extracting data from the browser's DOM.
- [PROMPT_INJECTION]: The skill ingests untrusted content from Google search results (titles, snippets, and bio data), representing an indirect prompt injection surface. This is inherent to the skill's web-scraping functionality and no malicious exploitation patterns were observed.
- [SAFE]: All detected operations, including local script execution, file system logging for performance memory, and navigation to Google, align with the skill's stated objective and are performed without signs of obfuscation or malicious intent.
Audit Metadata