thought-leadership-monitor
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from LinkedIn, Twitter, and YouTube which acts as an ingestion point for potentially malicious instructions.
- Ingestion points: Data is ingested through tools like
linkedin_web_v2_user_posts,twitter_web_search_timeline, andyoutube_web_v2_channel_videosas described inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the fetched social media content.
- Capability inventory: The skill workflow is limited to read-only research and synthesis; it lacks tools for file system access or shell command execution.
- Sanitization: No explicit sanitization or filtering of the external content is specified before the synthesis step.
Audit Metadata