threads-content-planner
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data, specifically voice samples and audience descriptions, to calibrate its output. This presents a theoretical surface for indirect prompt injection if the inputs contain malicious instructions.
- Ingestion points:
Voice samplesandAudience descriptioninputs defined inSKILL.md. - Boundary markers: None. The skill does not provide delimiters or instructions to ignore embedded commands within user inputs.
- Capability inventory: None. The skill is text-based and does not utilize any tools for network access, file writing, or command execution.
- Sanitization: No validation or sanitization of the input text is performed.
Audit Metadata