user-generated-content
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown documentation and instructional text. It does not contain any executable scripts, binaries, shell commands, or tool configurations that could perform system actions.
- [SAFE]: No sensitive data, hardcoded credentials, or private file paths were detected. References to email addresses (e.g., community@dbrand.com) and prices (e.g., ¥150) are used as generic examples in templates.
- [SAFE]: No obfuscation techniques such as Base64 encoding, hex sequences, or hidden Unicode characters were found in the text.
- [SAFE]: The skill outlines a workflow for processing external user data from social media platforms, which theoretically represents an indirect prompt injection surface. However, because the skill provides no automated capabilities, code, or tools to ingest or execute data, there is no direct security risk. Ingestion points: Social media posts and messages; Boundary markers: Absent; Capability inventory: No execution tools; Sanitization: Not defined.
Audit Metadata