social-media-paper-triage
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
python3,xreach,mcporter, andcurlto process URLs. - Evidence: Found in the 'Step 1: Extract Content from Platform' section of SKILL.md.
- [EXTERNAL_DOWNLOADS]: Fetches web content via
r.jina.ai, which is a well-known service used to optimize web pages for AI reading. - Evidence:
curl -s "https://r.jina.ai/URL"in SKILL.md. - [PROMPT_INJECTION]: The skill is designed to process untrusted data from social media platforms, creating a surface for indirect prompt injection.
- Ingestion points: Data retrieved from social media platforms (Xiaohongshu, WeChat, X, Reddit, Bilibili) specified in the Workflow section of SKILL.md.
- Boundary markers: No explicit boundary markers or 'ignore' instructions are provided to separate user-provided content from agent instructions.
- Capability inventory: The skill can execute local command-line tools and interact with the Zotero library based on processed data.
- Sanitization: There is no evidence of sanitization or validation of the content extracted from social media links.
Audit Metadata