community-research
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources (Reddit, Telegram, Facebook) which could contain malicious instructions designed to influence the agent's behavior during analysis.
- Ingestion points: Untrusted content enters the agent context through tools such as
reddit_app_subreddit_feed,telegram_web_channel_search, andfacebook_bulk_groupsas specified inSKILL.md. - Boundary markers: The instructions do not mandate the use of delimiters (e.g., XML tags, triple backticks) or specific "ignore embedded instructions" warnings when processing the fetched community data.
- Capability inventory: The skill's primary capabilities are data retrieval and synthesis; it does not appear to have file system write access or arbitrary command execution capabilities.
- Sanitization: There are no instructions provided for the agent to sanitize, escape, or filter the content retrieved from external platforms before incorporating it into its summary or analysis.
Audit Metadata