instagram-warmup
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external source through the
get_trendstool (Instagram trend data). This data is used to generate content briefs which can then be automatically published via thepublish_posttool, creating a pathway for external content to influence agent actions. - Ingestion points: External data fetched via
get_trendsand user-provided brand profiles. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external trend data as untrusted or to ignore embedded instructions.
- Capability inventory: The skill possesses the ability to create and publish content to external platforms using
create_postandpublish_posttools. - Sanitization: There is no evidence of validation or sanitization of trend data before it is interpolated into content generation prompts.
- [METADATA_POISONING]: The skill instructions and documentation contain assertive claims about a "2026 Instagram trust score update" and a "hard limit of 5 hashtags" that supposedly "blocks publication." These claims are currently inaccurate and may mislead the agent or the user regarding platform constraints and the necessity of specific warmup behaviors.
- [EXTERNAL_DOWNLOADS]: The
README.mdinstructs users to install the skill viabunx skills add genfeedai/skills/instagram-warmup. This involves remote code execution from a vendor-controlled repository. While this is a standard installation pattern for the Genfeed platform, it remains an external code reference.
Audit Metadata