fetch-substack-stats
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external web pages (Substack dashboard), which may include user-controlled content such as post titles.
- Ingestion points: Data is ingested via
get_page_textandread_pageMCP tools from the Substack stats and individual post pages. - Boundary markers: The workflow relies on parsing specific HTML structures (tables, headline numbers), though explicit LLM delimiters for the ingested text are not detailed.
- Capability inventory: The skill has the ability to write files to the local
corpus/stats/directory, navigate the browser, and execute scripts via thejavascript_tool. - Sanitization: External data is normalized into a structured
WeekExportobject based on a predefined schema before being archived. - [DYNAMIC_EXECUTION]: The skill documentation mentions the use of a
javascript_toolas part of the browser automation workflow to parse the rendered dashboard and extract specific data points from the DOM.
Audit Metadata