moda-social-linkedin
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows a legitimate design workflow using a predefined and restricted set of tools (moda). All operations are performed via a dedicated design CLI toolset.
- [SAFE]: No obfuscated code, unauthorized data access, or privilege escalation patterns were detected across the analyzed files. The instructions focus on layout, typography, and platform-specific formatting rules.
- [SAFE]: External references to well-known services like Google Fonts and Unsplash are standard for design applications and are handled by the underlying platform tools neutrally.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided content briefs and brand identifiers to generate design artifacts.
- Ingestion points: User-provided content briefs and brand data.
- Boundary markers: The instructions do not specify explicit delimiters for user-provided strings within the markup.
- Capability inventory: The skill utilizes Bash(moda:*) tools for canvas manipulation, file management, and media generation.
- Sanitization: The platform provides a sandboxed JavaScript environment for batch edits and dynamic content generation, enforcing limits on execution time and code size to prevent abuse.
Audit Metadata