lead-generation
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from X/Twitter conversations and profiles using tools like
x_search_tweetsandx_get_tweetswhich could contain hidden or malicious instructions. - Ingestion points: Workflow steps in
SKILL.mdprocess user tweets and bios. - Boundary markers: No boundary markers or instructions to ignore embedded commands are present to protect the agent.
- Capability inventory: The skill description suggests using automated engagement and following actions through scripts like
src/engagementBooster.jsandsrc/automation/keywordFollow.js. - Sanitization: No sanitization or data validation logic is provided for the external content.
- [NO_CODE]: The skill references multiple scripts (
src/keywordMonitor.js,src/audienceDemographics.js,src/audienceOverlap.js,src/engagementBooster.js,src/automation/keywordFollow.js) that were not included in the provided files. Because these scripts perform automated browser actions, their safety and actual functionality cannot be verified.
Audit Metadata