social-listening
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
python3to extract API credentials from a vendor-specific local JSON file (~/.gooseworks/credentials.json) and usescurlto interact with the vendor's API endpoint atapi.gooseworks.ai. These operations are consistent with the skill's purpose and target vendor-controlled infrastructure. - [PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by ingesting untrusted data from external sources.
- Ingestion points: Data is retrieved from the web via Exa search results and social media platforms via Scrape Creators (SKILL.md).
- Boundary markers: The instructions do not define clear delimiters or instruct the agent to ignore instructions embedded within the retrieved content.
- Capability inventory: The skill uses
curlfor all data retrieval operations. - Sanitization: There is no evidence of filtering, escaping, or validation of the external content before it is processed by the agent.
Audit Metadata