find-communities
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts
node scripts/run-state-check.jsandbash scripts/evidence-log.shfor state management and data logging. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a surface for indirect prompt injection.
- Ingestion points: Data is ingested from various online platforms including Discord, Reddit, HN, and Slack during the search process described in
SKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to isolate external content from the skill's operational logic.
- Capability inventory: The skill allows execution of local scripts and shell commands, which increases the impact if the agent follows instructions embedded in the external data.
- Sanitization: The instructions do not specify any sanitization, escaping, or validation requirements for the content retrieved from external sources before it is processed or logged.
Audit Metadata