link-reader
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data from
api.fxtwitter.comandreddit.comto display social media content to the user. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted content from external websites, which could contain malicious instructions.
- Ingestion points: Data is fetched from external social media URLs via proxy APIs as defined in
SKILL.md. - Boundary markers: The skill defines formatting structures for the output but does not specify delimiters or instructions to the agent to treat the fetched content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill's functionality is limited to network retrieval and text formatting; it lacks capabilities for local command execution, file system modification, or privilege escalation.
- Sanitization: There are no instructions for sanitizing or filtering the content retrieved from external sources.
Audit Metadata