ig-comment
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill creates and maintains a local log file to track which accounts the user has interacted with over time.
- Evidence: In
SKILL.md, the instructions specify keeping a "running note in~/.claude/instagram/log.mdof who has been commented on this week." - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (pasted text from Instagram) and has the capability to write to the file system, creating a vulnerability surface for indirect instructions.
- Ingestion points: The skill requires the user to paste "post or reel text" into the agent's context (
SKILL.md). - Boundary markers: There are no specific delimiters or instructions to ignore embedded commands within the pasted content.
- Capability inventory: The skill performs file-write operations to the local file system (
~/.claude/instagram/log.md). - Sanitization: No validation or sanitization of the input text is described in the skill instructions.
Audit Metadata