content-report
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local Python modules (e.g.,
scripts.content.tracker_cli,scripts.content.migrate_legacy_log) to perform data migration, platform stat pulls, and report generation. - [DATA_EXPOSURE]: The skill accesses application-specific data and configuration files located in the user's home directory under
~/.kai-marketing/. This is standard behavior for managing persistent application state and cached metrics. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted data from external sources like Dev.to, LinkedIn, and AI search results.
- Ingestion points: Data is pulled from external APIs in Step 1 and loaded from
data/content_log.jsonin Step 2. - Boundary markers: None explicitly defined in the provided instruction file.
- Capability inventory: The skill executes local Python scripts via subprocess calls (SKILL.md).
- Sanitization: No explicit sanitization or validation of external content is documented in the instruction file.
Audit Metadata