community-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to search for and analyze content from external, untrusted online communities such as Reddit, Discord, and various forums. This introduces a potential surface for indirect prompt injection if an attacker-controlled community contains malicious instructions targeted at the agent.
- Ingestion points: External websites and community directories (Reddit, Slofile, Disboard, etc.) via the agent's web tools.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the discovered content.
- Capability inventory: No code or tools are defined within this skill file, though it relies on external tools provided by the agent platform.
- Sanitization: No sanitization logic is provided for the content retrieved from external sources.
- [NO_CODE]: The skill consists entirely of Markdown text, containing only instructional content, workflow descriptions, and output templates. No scripts, shell commands, or binary files are present.
Audit Metadata