social
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes shell command templates to fetch data from public APIs and RSS feeds of well-known services, such as Reddit, Hacker News (via Algolia), Bluesky, and YouTube, for monitoring trends and brand mentions.
- [COMMAND_EXECUTION]: Reference documentation in
references/listening.mdprovides bash 'recipes' usingcurlandjqfor retrieving and parsing public social media content. These are intended for data gathering to support the agent's research tasks. - [PROMPT_INJECTION]: The skill is designed to ingest untrusted content from external social media feeds, which represents an indirect prompt injection surface.
- Ingestion points: Data enters the agent context from external APIs and RSS feeds as specified in the
references/listening.mdtriage loop. - Boundary markers: The provided command recipes do not include explicit instructions for using delimiters or 'ignore embedded instructions' warnings for the fetched data.
- Capability inventory: The skill's primary function is generating text (drafting social media posts and comments). It does not perform automated write operations, file system modifications, or autonomous network posts.
- Sanitization: There are no explicit instructions for sanitizing or escaping the external content before it is processed by the agent.
Audit Metadata