community-research

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources (Reddit, Telegram, Facebook) which could contain malicious instructions designed to influence the agent's behavior during analysis.
  • Ingestion points: Untrusted content enters the agent context through tools such as reddit_app_subreddit_feed, telegram_web_channel_search, and facebook_bulk_groups as specified in SKILL.md.
  • Boundary markers: The instructions do not mandate the use of delimiters (e.g., XML tags, triple backticks) or specific "ignore embedded instructions" warnings when processing the fetched community data.
  • Capability inventory: The skill's primary capabilities are data retrieval and synthesis; it does not appear to have file system write access or arbitrary command execution capabilities.
  • Sanitization: There are no instructions provided for the agent to sanitize, escape, or filter the content retrieved from external platforms before incorporating it into its summary or analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:44 AM