threads-post
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions require the agent to ingest external user-provided data from files such as 'brand-profile' and 'goals-and-kpis' to generate social media content. This creates a surface for indirect prompt injection where malicious instructions could be embedded in those files to influence the agent's behavior. 1. Ingestion points: 'brand-profile' and 'goals-and-kpis' referenced in SKILL.md. 2. Boundary markers: No specific boundary markers or instructions to disregard embedded commands are present. 3. Capability inventory: The skill uses the WoopSocial integration to publish and schedule posts to Threads. 4. Sanitization: No sanitization or validation of the external content is specified.
- [NO_CODE]: The skill consists entirely of markdown documentation and JSON configuration; no executable scripts or binary files are provided.
Audit Metadata