last30days-research
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves content from untrusted external platforms such as Reddit, Twitter, and YouTube. This creates a surface for indirect prompt injection attacks where malicious content within those platforms could attempt to influence the agent. \n
- Ingestion points: External data is ingested through
twitter_web_search_timeline,reddit_app_dynamic_search,youtube_web_v2_general_search,tavily_search, andgoogle_news_bulk_articles(defined in SKILL.md and references/sandbase-api-map.md). \n - Boundary markers: No specific delimiters or warnings are used to isolate untrusted external content from the agent's instructions. \n
- Capability inventory: The skill is primarily for data aggregation; no arbitrary command execution or local file system write capabilities are present in the skill definition. \n
- Sanitization: The skill does not implement sanitization or filtering for the data retrieved from external sources.
Audit Metadata