social-writer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest, process, and transform user-supplied social media drafts. This creates a surface for indirect prompt injection where malicious instructions embedded in user content could potentially influence the agent's behavior during the content generation or validation phase.
- Ingestion points: User-provided social media drafts and markdown files (as defined in the workflow and processed by
scripts/tweet_validator.py). - Boundary markers: No delimiters or 'ignore embedded instructions' warnings are present in the instructions or script logic.
- Capability inventory: The skill includes a Python script capable of reading local file content and displaying it to the agent's context.
- Sanitization: No escaping, validation, or filtering of external content is performed before it is processed.
Audit Metadata