opportunity-scout
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted content from Twitter, Reddit, Product Hunt, and various websites, creating a surface for indirect prompt injection attacks.
- Ingestion points: Data is gathered via the
bird search(Twitter) andweb_searchtools as described in the 'Scout Pipeline' section ofSKILL.md. - Boundary markers: The instructions do not define any delimiters or specific safety instructions to help the agent distinguish between its core instructions and potentially malicious commands embedded in the retrieved search results.
- Capability inventory: The skill possesses the capability to read and write files (
opportunities.json,report.md) and execute a local Python script (scripts/scout.py) which processes the gathered data. - Sanitization: No sanitization or validation steps are identified for the external content before it is processed by the agent or passed to the scoring script.
Audit Metadata