community-discovery

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to search for and analyze content from external, untrusted online communities such as Reddit, Discord, and various forums. This introduces a potential surface for indirect prompt injection if an attacker-controlled community contains malicious instructions targeted at the agent.
  • Ingestion points: External websites and community directories (Reddit, Slofile, Disboard, etc.) via the agent's web tools.
  • Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the discovered content.
  • Capability inventory: No code or tools are defined within this skill file, though it relies on external tools provided by the agent platform.
  • Sanitization: No sanitization logic is provided for the content retrieved from external sources.
  • [NO_CODE]: The skill consists entirely of Markdown text, containing only instructional content, workflow descriptions, and output templates. No scripts, shell commands, or binary files are present.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:27 AM