social-media-content-plan

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Node.js scripts including platform-playbook.mjs, build-calendar.mjs, and audit-content-plan.mjs to automate its workflow. These scripts perform file system operations and execute shell commands to manage the content planning and auditing process.
  • [EXTERNAL_DOWNLOADS]: The scripts/check-skills.mjs script facilitates the installation of companion skills from the developer's GitHub repository (Deepak-ai-93/deepak-skill) using the npx skills add command. This allows the skill to dynamically expand its toolkit for producing specific social media formats.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface in scripts/build-calendar.mjs. User-supplied niche, audience, and goal strings are ingested via the Stage 1 wizard and interpolated directly into calendar.md without sanitization or boundary markers. This could allow malicious input to influence the agent's logic during the subsequent content planning and review stages.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 03:56 PM