social-copy
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a professional marketing automation workflow with clearly defined roles and quality control mechanisms. No malicious intent, credential harvesting, or unauthorized network activity was found.- [PROMPT_INJECTION]: The skill possesses a potential attack surface for indirect prompt injection as it ingests untrusted data from marketing briefs and user-provided topics. However, this is inherent to its primary function as a content generator.
- Ingestion points: Ingests data from
.agents/skill-artifacts/mkt/short-form-brief/[slug]/brief.md,.agents/skill-artifacts/mkt/campaign-plan.md, and thetopicargument inSKILL.md. - Boundary markers: The instructions do not specify the use of clear boundary markers or delimiters when passing untrusted brief content to sub-agents.
- Capability inventory: The skill is configured with
Bash,Write,Read,Grep, andGlobtools, although no malicious use of these tools was detected. - Sanitization: There are no explicit instructions to sanitize or validate the content of the ingested briefs or topics before they are processed by the agents.
Audit Metadata