content-planner-auto
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts located in the 'scripts/' directory to generate calendars and automate post scheduling.
- [EXTERNAL_DOWNLOADS]: The documentation specifies a dependency on the 'requests' library, which is a reputable and standard Python package for HTTP requests.
- [DATA_EXFILTRATION]: The skill performs network operations to 'api.post-bridge.com' for the purpose of scheduling social media posts, which is the primary function of the tool.
- [PROMPT_INJECTION]: The skill processes structured JSON data from external files to drive its scheduling logic, creating an attack surface for indirect prompt injection. Ingestion points: '/tmp/calendar.json'; Boundary markers: Absent; Capability inventory: Network API calls via batch_scheduler.py; Sanitization: Absent.
Audit Metadata