post-acceptance
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to retrieve and process live social media content (posts, profiles, and display names), which are considered untrusted data sources.
- Ingestion points: The
references/xquik-promotion.mdfile defines a workflow for ingesting data using the Xquiksearchtool. - Boundary markers: The instructions explicitly mandate isolating retrieved content between
XQUIK_UNTRUSTED_X_CONTENTboundary markers and escaping the text. - Capability inventory: The skill possesses the capability to publish content to social media platforms via a
create-postoperation. - Sanitization: The workflow enforces strict human-in-the-loop approval, requiring the user to review the exact payload and public effect before any publishing action occurs.
- [EXTERNAL_DOWNLOADS]: The skill instructions in
references/xquik-promotion.mddirect the agent to connect to a hosted Model Context Protocol (MCP) endpoint athttps://xquik.com/mcpto access additional research and publishing tools.
Audit Metadata