signal-detection-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a pipeline that ingests untrusted data from various external sources, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill utilizes
reddit-scraper,linkedin-commenter-extractor, andjob-posting-intentto fetch content from public web platforms inSKILL.md. - Boundary markers: There are no instructions or delimiters provided to the agent to treat external content as data only or to ignore instructions embedded within the scraped text.
- Capability inventory: The skill instructs the agent to consolidate processed data into a Google Sheet, providing a potential output path for influenced data.
- Sanitization: No sanitization or filtering logic is described for the incoming web data before it is scored and consolidated.
Audit Metadata