trending-ad-hook-spotter
Warn
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions directly interpolate user-provided inputs such as industry keywords, competitor names, and URLs into shell commands executed via python3. This creates a vulnerability where malicious inputs could result in arbitrary command execution on the host system.
- [PERSISTENCE]: The documentation provides a crontab template for scheduling recurring execution. While serving a functional purpose for trend monitoring, this establishes a persistence mechanism that could be abused if the skill's scripts are compromised.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests large volumes of untrusted data from platforms like Twitter, Reddit, and LinkedIn, creating an attack surface for indirect prompt injection.
- Ingestion points: Data is fetched from external social platforms using various scraper scripts (e.g., scrape_twitter.py, scrape_reddit.py, scrape_linkedin_posts.py, scrape_hn.py).
- Boundary markers: The instructions do not include delimiters or specific guidance to ignore instructions that might be embedded in the scraped content.
- Capability inventory: The skill possesses the ability to write files to the local system (Phase 4 output) and execute subprocesses via the command line (Phase 1).
- Sanitization: There are no documented procedures for sanitizing or filtering external data before it is processed by the AI for trend analysis and hook generation.
Audit Metadata