fb-hook-extractor
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is text analysis and classification based on predefined formulas. No security vulnerabilities or malicious patterns were identified across the analyzed files.
- [PROMPT_INJECTION]: The instructions do not contain any patterns intended to bypass AI safety filters or override the agent's core instructions.
- [DATA_EXPOSURE]: There is no evidence of the skill accessing sensitive local files (e.g., SSH keys, environment variables) or attempting to exfiltrate data to external servers.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute scripts from remote sources. References to external tools are described as optional user-driven integrations rather than automated execution paths.
- [OBFUSCATION]: All content is in plain text. No Base64, zero-width characters, or other encoding techniques are used to hide malicious logic.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-pasted content from Facebook. However, it lacks the dangerous capabilities (e.g., system commands, file writing) required to turn this input into an exploit. Furthermore, it includes a 'Source audit' step that explicitly flags suspicious content patterns in the input.
Audit Metadata