mob-check
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from various external social media sources to synthesize community sentiment briefs.
- Ingestion points: Content is fetched in
SKILL.mdusingweb_search,web_extract,x_search, andyoutube-contentskills. - Boundary markers: A deterministic Python ranking script (
scripts/rank.py) acts as a filter and aggregator for the raw search results. - Capability inventory: The skill uses
python3to run the ranker, executes theghCLI, and utilizes platform tools for network searching and extraction. - Sanitization: The pipeline includes a pruning step for low-relevance items and requires a synthesis step that transforms raw data into prose, though it does not explicitly mention escaping of injected instructions.
- [DYNAMIC_EXECUTION]: The skill executes a bundled script at runtime and provides instructions for creating temporary verification scripts.
- Evidence:
SKILL.mdinstructs the agent to executescripts/rank.pyusingpython3oruv runto process gathered data. - Evidence:
references/research-to-experiment.mddescribes the creation and execution of temporary verifiers with a specifichermes-verify-prefix. - [COMMAND_EXECUTION]: The skill uses command-line tools to interact with external services.
- Evidence:
SKILL.mdutilizes thegh(GitHub) CLI to search repositories and fetch metadata via the GitHub API.
Audit Metadata