post-scorer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the Apify platform to retrieve LinkedIn post history via the
apimaestro/linkedin-profile-postsactor. This interaction is essential for the skill's intended analytical purpose and includes explicit prompts to the user regarding the source, duration, and potential costs of the operation. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external social media profiles and project-specific files to perform scoring and generate rewrites. This configuration presents a risk where malicious instructions embedded in the ingested LinkedIn posts could attempt to influence the agent's behavior.
- Ingestion points: LinkedIn post content scraped via Apify;
about-me.mdandvoice.mdproject files. - Boundary markers: The instructions do not define clear delimiters or "ignore instructions" directives for the data processed during the analysis or rewriting phases.
- Capability inventory: The skill possesses network access for tool invocation (Apify) and file system write capabilities for caching data (
[username]-all-posts.json). - Sanitization: There are no explicit instructions to filter or sanitize external text before it is used to influence post rewriting or analysis output.
Audit Metadata