threads-multichannel
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process arbitrary user-supplied text for formatting and potential publication.
- Ingestion points: The
textparameter within thethreads_format_multi_channeltool and subsequent processing steps inSKILL.mdingest raw user input. - Boundary markers: There are no explicit delimiters or instructions defined to isolate the processed text or to instruct the agent to ignore any embedded directives within the user content.
- Capability inventory: The skill possesses the ability to execute network operations via the
threads_publish_texttool to post content to an external platform. - Sanitization: The instructions lack specific sanitization, validation, or filtering logic to detect or neutralize malicious prompts hidden within the input text.
Audit Metadata