od-prototype-social-reddit-card
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses the
$ARGUMENTSvariable to populate a design brief passed to theprepare_open_design_brieftool. Since the agent is instructed to author files based on the resulting instructions, a malicious user could provide input designed to manipulate the agent's file-system operations.\n - Ingestion points: The
$ARGUMENTSplaceholder inSKILL.mdserves as the primary entry point for untrusted data.\n - Boundary markers: User input is interpolated directly into a string without delimiters or instructions to ignore embedded commands.\n
- Capability inventory: The agent utilizes file-editing tools and the
register_open_design_artifacttool to carry out the instructions generated from the brief.\n - Sanitization: The skill performs no validation, escaping, or filtering on the user-provided content before it is processed.
Audit Metadata