ig-hook-extractor
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of Instagram captions and slide text provided by the user. This creates a surface for indirect prompt injection where instructions could be embedded in the content being analyzed to influence the agent's behavior.\n
- Ingestion points:
SKILL.md(Step 2) instructs the agent to ask the user to paste captions, slide text, or Reel descriptions.\n - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the analyzed text.\n
- Capability inventory: The skill's capabilities are limited to URL parsing (using
lib.url_parseras mentioned inSKILL.md), text classification, and template generation. No file-write, network-send, or shell-execution capabilities are defined across the provided files.\n - Sanitization: There is no mention of sanitizing or escaping the external content before it is processed by the model.
Audit Metadata