postiz

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external social media providers that could contain malicious instructions designed to influence the agent's behavior. * Ingestion points: The agent retrieves untrusted data via 'postiz integrations:trigger' (fetching flairs, playlists, etc.), 'postiz posts:list' (reading existing posts), 'postiz analytics:post', and 'postiz posts:missing' (File: SKILL.md). * Boundary markers: The instructions do not define clear boundaries or 'ignore' instructions for the data retrieved from these external platforms. * Capability inventory: The skill provides capabilities to read local files via 'postiz upload' and write content to multiple social media platforms via 'postiz posts:create' (File: SKILL.md). * Sanitization: There is no explicit sanitization or filtering logic described for the external content before it is processed by the agent.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the 'postiz' CLI from the official NPM registry and references the official GitHub repository for the Postiz application. These resources originate from a well-known service and are documented neutrally.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 11:24 PM