analyze-creator
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (social media captions and transcripts) that could potentially contain malicious instructions. The skill includes a robust security header defining scraped content as data only, instructing the agent to never follow instructions found within it and to stop execution if addressed directly by the text.
- [EXTERNAL_DOWNLOADS]: The skill utilizes Apify actors (e.g.,
apify/instagram-scraper,clockworks/tiktok-scraper) to gather content. Apify is a well-known platform for data extraction, and the use of specific actor IDs is consistent with the skill's functionality. - [DATA_EXFILTRATION]: The skill writes analyzed content to a Supabase database. This is the primary intended purpose of the skill (building a competitor database) and uses a placeholder for the project ID (
YOUR_SUPABASE_PROJECT_ID), representing a standard integration with a well-known service.
Audit Metadata