buffer
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill interacts with the official Buffer API (api.buffer.com), which is a well-known social media management service.
- [SAFE]: Payload construction uses heredocs to write JSON to temporary files. This is a defensive coding practice that prevents potential shell command injection from user-supplied post content or variables.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: The skill processes user-supplied post content and reads responses from the Buffer API (SKILL.md). Boundary markers: No specific delimiters are used to wrap external content. Capability inventory: Uses curl for network requests and cat for file writing (SKILL.md). Sanitization: The skill uses temporary files and heredocs to safely handle user input before interpolation into commands, mitigating shell injection risks.
Audit Metadata