brand-mention-sentiment-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and summarize external brand mentions from news, reviews, or social media, which are untrusted data sources.
- Ingestion points: The
run.pyscript reads JSON payloads from a file path provided via the--inputcommand-line argument.SKILL.mddefines the input as JSON objects or CSV rows containing business signals. - Capability inventory: The provided Python script has the capability to read from and write to the local file system using
pathlib.Path. While no network or subprocess execution is currently present in the scaffold, the output is intended for agent processing. - Boundary markers: There are no delimiters or instructions in
SKILL.mdto prevent the agent from following malicious commands that might be embedded in the brand mention data. - Sanitization: There is no evidence of input validation, filtering, or sanitization in the
run.pyimplementation.
Audit Metadata