brand-monitoring
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize data from various external platforms which are not under the user's control.
- Ingestion points: SKILL.md defines workflows to fetch data from Twitter, Reddit, Tavily, Google News, Xiaohongshu, and Weibo.
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore instructions that might be embedded in the fetched content.
- Capability inventory: The skill uses sandbase_call_tool and sandbase_describe_tool (referenced in SKILL.md and sandbase-api-map.md) to interact with search APIs across multiple platforms.
- Sanitization: The skill does not provide instructions for sanitizing or escaping the retrieved external content before the synthesis step.
Audit Metadata