15-social-listening
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from various social media platforms, including comments, reviews, and mentions. This creates a surface for indirect prompt injection where malicious instructions embedded in social media posts could attempt to influence the agent's behavior.
- Ingestion points: Mentions, comments, and reviews from Facebook, TikTok, Zalo, Google Reviews, and Vietnamese forums like Voz (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or instructions to ignore potential commands embedded in the analyzed data.
- Capability inventory: The skill's capabilities are restricted to generating markdown (.md) reports, planning documents, and sentiment summaries. It lacks the ability to execute code, write to the filesystem, or perform network requests based on the ingested content.
- Sanitization: There is no mention of sanitizing or filtering external content before it is processed by the agent.
Audit Metadata