x-comment-engagement
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and act upon external social media posts, which creates a vulnerability surface for indirect prompt injection. 1. Ingestion points: External posts and threads from the X platform (referenced in the 'Trigger' and 'A1' sections). 2. Boundary markers: The instructions lack explicit delimiters or 'ignore' commands for processing external content. 3. Capability inventory: The skill directs the agent to generate replies, quotes, and engagement content based on the ingested external text. 4. Sanitization: There is no mention of filtering or sanitizing the external data to prevent embedded malicious instructions.
- [SAFE]: No technical vulnerabilities such as remote code execution, persistence mechanisms, or unauthorized file access were detected.
- [DATA_EXFILTRATION]: No patterns indicative of data exfiltration, credential harvesting, or unauthorized network operations were identified.
Audit Metadata