social

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the postplus CLI for managing social media accounts, uploading media, and performing research. These commands are integral to the skill's purpose and are documented with clear placeholders for user-specific IDs and content.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze public social media content (e.g., Reddit posts, YouTube comments) via research tools. While this introduces a potential attack surface for indirect prompt injection, the skill includes instructions for the agent to verify content, summarize findings objectively, and requires explicit human authorization before any write operations (posting or replying) are performed.
  • [SAFE]: The skill follows security best practices for automated social media management, including the use of stable operation IDs to ensure idempotency and checking tool schemas before execution to ensure compatibility and valid input.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 05:35 PM