douyin-keyword-collector
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill extracts untrusted data from the Douyin user interface, which could serve as a vector for indirect prompt injection attacks.
- Ingestion points: Data is retrieved from the search prompt box via the browser.snapshot action in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions to treat external data as untrusted content.
- Capability inventory: The skill uses the browser tool for navigation and UI interaction (click, type, snapshot) as detailed in SKILL.md.
- Sanitization: No validation or filtering is applied to the extracted keyword suggestions before they are presented to the user.
Audit Metadata