find-communities

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local scripts node scripts/run-state-check.js and bash scripts/evidence-log.sh for state management and data logging.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a surface for indirect prompt injection.
  • Ingestion points: Data is ingested from various online platforms including Discord, Reddit, HN, and Slack during the search process described in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to isolate external content from the skill's operational logic.
  • Capability inventory: The skill allows execution of local scripts and shell commands, which increases the impact if the agent follows instructions embedded in the external data.
  • Sanitization: The instructions do not specify any sanitization, escaping, or validation requirements for the content retrieved from external sources before it is processed or logged.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 10:34 AM
Security Audit — agent-trust-hub — find-communities