xpoz-intelligence
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external social media data from platforms like X, Instagram, TikTok, and Reddit, which could contain adversarial instructions intended to influence the agent's behavior.
- Ingestion points: The skill performs queries for social media posts, hooks, and competitor content across multiple platforms (X, Instagram, TikTok, Reddit).
- Boundary markers: There are no explicit delimiters or instructions defined to separate untrusted social media content from the agent's execution instructions.
- Capability inventory: The skill instructs the agent to file items into a Notion Content Engine, update Obsidian frameworks, and interact with Semrush and Higgsfield tools based on the ingested data.
- Sanitization: The instructions do not specify any sanitization, filtering, or validation logic for the external content before it is distilled into frameworks or filed as content ideas.
Audit Metadata