cardiology-youtube-scriptwriter
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates a 'Social Listening Research' phase that involves fetching data from untrusted external sources.
- Ingestion points: The workflow in
SKILL.md(Phase 2) andreferences/social-listening.mddirects the agent to perform web searches on Reddit, YouTube comments, and various health forums to extract trending topics and questions. - Boundary markers: The instructions do not specify any delimiters or safety warnings to treat the retrieved web content as untrusted data, which could allow malicious instructions embedded in those sources to influence the agent's behavior.
- Capability inventory: The agent's capabilities are limited to ideation and script writing within the conversation context; it does not exhibit high-risk capabilities like file system modification or network exfiltration.
- Sanitization: There is no evidence of sanitization or filtering logic applied to the external content before it is processed and synthesized into the final output.
Audit Metadata