fb-audience-insights
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data fetched from Facebook, including page descriptions and user comments, which introduces a potential surface for indirect prompt injection if malicious instructions are embedded in that content.
- Ingestion points: Data retrieved from
page_urlandpost_urlvia Apify methods described inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present for the external data processing.
- Capability inventory: Uses
lib.ApifyClient()to fetch data; no file-write or shell execution capabilities are present. - Sanitization: No explicit sanitization or filtering of the fetched content is documented.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the Apify platform and specifically references the
apify/facebook-pages-scraperanddanek/facebook-comments-ppractors to retrieve live social media data.
Audit Metadata