link-reader

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from the web.
  • Ingestion points: The skill fetches text data from Twitter (via api.fxtwitter.com) and Reddit (via .json endpoints) including tweet bodies, articles, and comments.
  • Boundary markers: Absent. There are no instructions to the agent to treat the fetched content as data only or to ignore embedded instructions.
  • Capability inventory: The skill primarily uses the WebFetch tool to retrieve data.
  • Sanitization: Absent. The skill maps external strings directly into the agent's output context without escaping or filtering.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with external services to retrieve content.
  • Twitter/X content is routed through api.fxtwitter.com, a well-known third-party proxy for social media scraping.
  • Reddit content is accessed by appending .json to standard URLs to retrieve structured data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 07:59 AM
Security Audit — agent-trust-hub — link-reader