end-to-end-funding-signal
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local scripts using subprocesses to perform data collection, such as 'python3 skills/twitter-scraper/scripts/search_twitter.py'. While these are expected components of the skill, the execution of shell commands involves risks if user-supplied configuration or scraped data influences command arguments.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from various external web sources.
- Ingestion points: Scraped content from Twitter, Reddit, Hacker News, and general web searches specified in Step 1.
- Boundary markers: The instructions do not define clear delimiters or guidelines to ignore instructions that might be embedded in the scraped text.
- Capability inventory: The skill can execute local scripts, write campaign data to files in Step 5, and communicate with external outreach tools.
- Sanitization: There is no evidence of sanitization or filtering to prevent the agent from misinterpreting scraped data as authoritative commands.
Audit Metadata