weibo-research
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted, user-generated content from external sources (Weibo posts, comments, and topic discussions).
- Ingestion points: Data enters the agent context through tools like
weibo_web_search,weibo_web_post_comments,weibo_web_user_posts, andweibo_web_comment_replies(documented inSKILL.mdandreferences/sandbase-api-map.md). - Boundary markers: The instructions do not explicitly define boundary markers or delimiters for the fetched Weibo content to prevent the agent from mistaking data for instructions.
- Capability inventory: The skill has the capability to search, retrieve user profiles, and fetch deep comment threads via the
sandbase_call_toolgateway. - Sanitization: There is no mention of sanitization or filtering of the external content before it is processed by the agent.
Audit Metadata