social-media-intelligence
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from multiple social media platforms (e.g., X, TikTok, Reddit) and web archiving services, which constitutes untrusted external data.
- Ingestion points:
SocialPostobjects (populated from platform APIs) and responses from web archiving services likearchive.todayandweb.archive.orginSocialArchiver. - Boundary markers: The skill explicitly defines an "Untrusted content boundary" using
<EXTERNAL_DATA>tags and provides specific instructions to treat retrieved text as data rather than instructions. - Capability inventory: The skill uses the
requestslibrary for network operations (archiving) and performs content hashing and network mapping. - Sanitization: Instructions recommend structured extraction, schema validation, and size capping, though the processed social media content remains a vector for indirect injection attacks targeting the agent's reasoning.
- [EXTERNAL_DOWNLOADS]: The
SocialArchiverclass performs network operations to external services. - Evidence: Uses
requests.gettoweb.archive.organdrequests.posttoarchive.todayto submit URLs for archiving. - Context: These are well-known archiving services commonly used in journalism and OSINT workflows.
Audit Metadata