social-reply
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user-provided content from social media (comments, DMs, and mentions), which creates a surface for indirect prompt injection attacks.
- Ingestion points: Untrusted text enters the context through the raw batch of comments described in the workflow of
SKILL.md. - Boundary markers: The instructions do not define strict delimiters (such as specific XML tags or triple quotes) to separate the untrusted data from the system instructions.
- Capability inventory: No executable tools, scripts, or network capabilities are associated with the skill, limiting the potential impact of an injection.
- Sanitization: The instructions do not include mechanisms for sanitizing or escaping the content of the processed items.
- [NO_CODE]: No executable code, binaries, or scripts were detected in the skill package. The skill relies entirely on natural language instructions.
Audit Metadata