facebook-groups
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting and processing untrusted external data.
- Ingestion points: The skill is designed to read external configuration files such as
brand-profileandgoals-and-kpis(SKILL.md). - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following malicious instructions that might be embedded within the brand profile or goals data.
- Capability inventory: The skill has the capability to draft social media posts and initiate publishing workflows via
WoopSocial(SKILL.md,references/scope-and-connections.md). - Sanitization: No input validation or sanitization mechanisms are specified for the external data being processed.
Audit Metadata