run-organic-social
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill leverages the
gooseworks:automation_upserttool to establish recurring scheduled tasks (cron) for two-week calendar refills. This is a primary feature designed to ensure continuous social media activity without manual intervention. - [DYNAMIC_EXECUTION]: For its scheduled refill functionality, the skill copies a set of 'method' files containing instructions to the workspace and utilizes a specialized agent prompt to load and execute these instructions. This bootstrapping mechanism allows the skill's logic to persist and function in restricted environments.
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it actively reads and processes untrusted data from external social media feeds for niche research and voice modeling. The evidence chain includes ingestion points (social profile reads and web searches), boundary markers ('PERSON YES NEEDED' flags), significant capability inventory (automation, file-write, and data providers), and sanitization (AI-tell blacklist and manual approval gates).
- [EXTERNAL_DOWNLOADS]: The skill instructions facilitate the download and installation of the
goose-graphicsutility from the vendor's catalog to handle rendering tasks. While this involves fetching and loading external archives, it is a recognized vendor resource intended for rendering slides and documents. - [COMMAND_EXECUTION]: The skill directs the agent to perform environment setup tasks, such as unpacking archives into skill folders and configuring dependencies like Node and Playwright, which are necessary for the graphic rendering components.
Audit Metadata