social-media-content-plan
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Node.js scripts including
platform-playbook.mjs,build-calendar.mjs, andaudit-content-plan.mjsto automate its workflow. These scripts perform file system operations and execute shell commands to manage the content planning and auditing process. - [EXTERNAL_DOWNLOADS]: The
scripts/check-skills.mjsscript facilitates the installation of companion skills from the developer's GitHub repository (Deepak-ai-93/deepak-skill) using thenpx skills addcommand. This allows the skill to dynamically expand its toolkit for producing specific social media formats. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface in
scripts/build-calendar.mjs. User-supplied niche, audience, and goal strings are ingested via the Stage 1 wizard and interpolated directly intocalendar.mdwithout sanitization or boundary markers. This could allow malicious input to influence the agent's logic during the subsequent content planning and review stages.
Audit Metadata