linkedin-company-pages
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill design incorporates processing of untrusted external data, creating a surface for indirect prompt injection attacks.
- Ingestion points: The skill explicitly instructs the agent to read context from 'brand-profile' and 'goals-and-kpis' files in SKILL.md and references/scope-and-connections.md to guide its strategy.
- Boundary markers: The instructions do not include delimiters or specific guidance to the agent to ignore potential instructions embedded within these external files.
- Capability inventory: The agent has the ability to draft social media posts and advocacy content (SKILL.md), and it integrates with the WoopSocial tool for automated content publishing as detailed in references/scope-and-connections.md.
- Sanitization: The skill lacks requirements for sanitizing or validating the input data from these external files before it influences the agent's output or tool interactions.
Audit Metadata