mob-check
Warn
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructs the agent in the
references/research-to-experiment.mdfile to generate and execute temporary "ad-hoc verifier" scripts to validate JSON research artifacts. This involves generating executable content at runtime and running it via a subprocess.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from social media and the web, creating a vulnerability surface.\n - Ingestion points: Untrusted data enters the agent context through
web_search,web_extract,x_search,youtube-content, andghCLI outputs (referenced inSKILL.md).\n - Boundary markers (absent): There are no instructions to use specific delimiters or ignore embedded instructions when synthesizing the gathered data into a brief.\n
- Capability inventory: The skill executes the bundled
scripts/rank.pyscript and dynamically generated verification scripts as subprocesses.\n - Sanitization (absent): The content is processed for ranking but is not sanitized or filtered for prompt injection attacks before synthesis.\n- [COMMAND_EXECUTION]: The skill uses
subprocesscalls to execute the bundledscripts/rank.pyand ad-hoc verification scripts as specified inSKILL.mdandreferences/research-to-experiment.md.
Audit Metadata