social
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its social listening features that ingest untrusted content from the web to score posts and draft responses.
- Ingestion points: Data is retrieved from Reddit, Hacker News, Bluesky, and various RSS feeds as detailed in
references/listening.md. - Boundary markers: The instructions do not define clear delimiters or specific instructions to ignore embedded commands within the fetched data.
- Capability inventory: The skill uses
curlanddev-browserto fetch external data and provides logic for drafting social media engagement content. - Sanitization: There is no evidence of content sanitization or validation for the ingested external data.
- [EXTERNAL_DOWNLOADS]: The skill fetches data from public APIs of well-known services including Reddit, Hacker News (via Algolia), and Bluesky for social listening purposes.
- [COMMAND_EXECUTION]: Contains shell command recipes using
curlandjqto retrieve and parse JSON/XML data from external web endpoints.
Audit Metadata