kai-influencer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from various project files which may contain untrusted content that could influence agent behavior.
- Ingestion points: Reads from
MARKETING.md,CLAUDE.md,README.md,PROJECT.md,package.json, and external landing pages. - Boundary markers: The instructions lack explicit delimiters or warnings to ignore malicious instructions embedded within these source files.
- Capability inventory: The skill can read/write to the workspace and execute shell commands (Python scripts).
- Sanitization: There is no evidence of content sanitization or validation for the data ingested from the workspace files.
- [COMMAND_EXECUTION]: The skill invokes local Python scripts to automate quality gate checks.
- Evidence: Phase 4 executes
python scripts/quality_gates/four_us_score.py <file>andpython scripts/quality_gates/banned_word_check.py <file>.
Audit Metadata