social
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interfaces with external social media platforms (Reddit, Hacker News, Bluesky, YouTube) to fetch and analyze posts. This introduces an attack surface for indirect prompt injection where malicious instructions could be embedded in social media content. The skill effectively mitigates this risk by requiring human review of all generated drafts before posting and focusing on data categorization rather than autonomous execution.
- Ingestion points: references/listening.md (fetching JSON/XML data from Reddit, Hacker News, Bluesky, and RSS feeds).
- Boundary markers: Instructions explicitly state: 'Always ask before posting — output drafts, user approves and posts manually.'
- Capability inventory: Uses curl for data retrieval and dev-browser for platform navigation; no dynamic code execution (eval/exec) is used on external data.
- Sanitization: Relies on Large Language Model (LLM) internal safety filters and mandatory human review.
- [EXTERNAL_DOWNLOADS]: The skill provides curl recipes to fetch data from well-known social media APIs including Reddit, Algolia (Hacker News), and Bluesky. These operations target public data endpoints and do not involve downloading or executing remote scripts.
- [COMMAND_EXECUTION]: The skill recommends the installation and use of standard, reputable command-line utilities (jq, xmllint) for parsing structured data fetched from social media APIs.
Audit Metadata