sampling-bluesky-zeitgeist
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands to set up the environment and run analysis.
- Evidence: Instructions in
SKILL.mdspecify runningnpm installand executing the Node.js sampler script usingnode. - [EXTERNAL_DOWNLOADS]: The skill installs third-party libraries from the NPM registry to enable WebSocket communications.
- Evidence:
npm install ws https-proxy-agentis used to prepare the environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes live, untrusted data from the Bluesky firehose, which could theoretically contain malicious instructions designed to influence the agent's behavior during analysis.
- Ingestion points: The
scripts/zeitgeist-sample.jsscript connects directly to the Bluesky Jetstream WebSocket (wss://jetstream1.us-east.bsky.network). - Boundary markers: None are employed when the script processes or when the agent analyzes the resulting JSON data.
- Capability inventory: The skill uses
nodefor data collection and instructions suggest usingstr_replaceto generate an HTML artifact saved to/mnt/user-data/outputs/zeitgeist.html. - Sanitization: While the script tokenizes text for frequency analysis (filtering non-alphanumeric characters), it includes raw sample post text in the final data object without sanitization.
Audit Metadata