github-stars-playbook
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze data from external sources including competitor release notes, Reddit threads, and Hacker News posts, which represents an attack surface for indirect prompt injection.\n
- Ingestion points: External repository data, competitor release notes, and community posts from X, Reddit, and Hacker News (specified in the 'Competitor-window scan' section of SKILL.md).\n
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the external data being analyzed.\n
- Capability inventory: The skill is entirely process-oriented and does not utilize any tools for code execution, network requests, or persistent file system changes.\n
- Sanitization: No explicit filtering or sanitization of ingested content is mentioned in the playbook workflow.
Audit Metadata