sn-search-social-en

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes data from external social media platforms which are untrusted sources, creating a surface for indirect prompt injection. \n
  • Ingestion points: External content is fetched in scripts/reddit_search.py, scripts/twitter_search.py, and scripts/youtube_search.py. \n
  • Boundary markers: The skill outputs results in a structured JSON format. \n
  • Capability inventory: The included scripts (scripts/reddit_search.py, scripts/twitter_search.py, scripts/youtube_search.py) are limited to making network GET requests and outputting text to the console; they do not have file system write or command execution capabilities. \n
  • Sanitization: Content is truncated for display but is not filtered for potential instruction-based injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 09:37 AM