threads-multichannel

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process arbitrary user-supplied text for formatting and potential publication.
  • Ingestion points: The text parameter within the threads_format_multi_channel tool and subsequent processing steps in SKILL.md ingest raw user input.
  • Boundary markers: There are no explicit delimiters or instructions defined to isolate the processed text or to instruct the agent to ignore any embedded directives within the user content.
  • Capability inventory: The skill possesses the ability to execute network operations via the threads_publish_text tool to post content to an external platform.
  • Sanitization: The instructions lack specific sanitization, validation, or filtering logic to detect or neutralize malicious prompts hidden within the input text.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:23 PM