hootsuite-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to official Hootsuite API endpoints (platform.hootsuite.com) to verify deployment readiness and connectivity. These operations involve accessing the HOOTSUITE_API_KEY environment variable.
- [INDIRECT_PROMPT_INJECTION]: The validation script ingests data from external Hootsuite API responses, representing a potential surface for indirect prompt injection.
- Ingestion points: API responses from https://platform.hootsuite.com/v1/me and /socialProfiles referenced in SKILL.md.
- Boundary markers: Absent; the script directly parses JSON responses from the API.
- Capability inventory: The skill utilizes fetch for network operations and accesses environment variables for authentication.
- Sanitization: Absent; response data is used directly for connectivity and profile count validation.
Audit Metadata