social-proof-mining
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed entirely of natural language instructions and does not contain any scripts, executable code, or shell commands.
- [DATA_EXPOSURE_AND_EXFILTRATION]: There are no patterns of data exfiltration or unauthorized access. In fact, the skill contains explicit constraints against exposing private customer information and identifies permission status as a mandatory requirement for data processing.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data (customer testimonials and messages). However, since the skill lacks any execution capabilities or external network tools, the surface for a successful indirect prompt injection attack to cause harm is non-existent.
- [PROMPT_INJECTION]: The instructions do not attempt to bypass safety filters or override system-level instructions. The use of 'Hard rules' is restricted to task-specific safety and data integrity guidelines.
Audit Metadata