marketing-twitter-engager
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves monitoring and responding to real-time external data which could contain malicious instructions.
- Ingestion points: The skill actively monitors 'trending topics, hashtags, and industry conversations' and 'brand mentions' (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its core instructions and embedded commands within the tweets or trends it processes.
- Capability inventory: The skill is designed to generate and post tweets, educational threads, and participate in Twitter Spaces, allowing it to propagate potentially injected content.
- Sanitization: No validation or sanitization of external Twitter content is mentioned in the workflow.
Audit Metadata