jab-hook
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data from social media accounts to extract structural patterns for post drafting, creating a vector for indirect prompt injection.
- Ingestion points: The skill retrieves recent posts from external 'inspiration accounts' (X and LinkedIn) using tools like
social-fetchoragent-browseras described inSKILL.md(Step 4) andreferences/inspiration.md. - Boundary markers: The instructions lack explicit boundary markers or directives to the agent to ignore potentially malicious instructions embedded within the scraped social media content.
- Capability inventory: The skill possesses significant capabilities, including the ability to create and syndicate social media drafts to the user's personal X and LinkedIn accounts via the
mcp__typefully__typefully_create_drafttool. - Sanitization: There is no evidence of sanitization or filtering of the external content before it is processed by the LLM to influence the generated drafts. However, the skill does include human-in-the-loop checkpoints, requiring user approval before drafts are created and scheduled.
Audit Metadata