trending-ad-hook-spotter
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Twitter, Reddit, LinkedIn, and Hacker News to identify trends and generate ad hooks. 1. Ingestion points: Data from Twitter/X and LinkedIn (via web_search), Reddit (via Apify API), and Hacker News (via Algolia API). 2. Boundary markers: The skill does not define delimiters or provide instructions to ignore potential commands embedded in the fetched content. 3. Capability inventory: The skill can write files to the local directory (trending-hooks-[DATE].md), perform network requests, and execute web searches. 4. Sanitization: There is no evidence of content sanitization or validation of the ingested social media data.
- [EXTERNAL_DOWNLOADS]: The skill uses official APIs from well-known services including Apify and Algolia for data collection. These operations are documented neutrally and rely on user-provided environment variables for authentication.
Audit Metadata