developer-listening
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes workflows for monitoring and analyzing user-generated content from technical platforms, creating an attack surface where malicious instructions could be embedded in the data being processed. * Ingestion points: Mentions and conversations from GitHub, Hacker News, Reddit, Stack Overflow, and Discord as described in SKILL.md. * Boundary markers: There are no specific instructions for using delimiters or markers to prevent the agent from obeying instructions found within the ingested data. * Capability inventory: The skill suggests using native platform search and the
ghCLI for monitoring tasks, but does not provide automated scripts or high-privilege capabilities. * Sanitization: No logic or instructions are provided for filtering or sanitizing the content fetched from external sources.
Audit Metadata