instagram-agent-teneo
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data retrieved from Instagram (profiles, posts, hashtags, comments) which could theoretically contain malicious instructions.
- Ingestion points: The agent accepts user-supplied arguments such as
<username>,<url>, and<hashtag>which are passed to theteneoCLI tool inSKILL.md. - Boundary markers: The instructions do not specify any delimiters or safety markers to wrap the content returned from the external sources.
- Capability inventory: The skill uses terminal commands (
~/teneo-skill/teneo command ...) to interact with the Teneo network, as described inSKILL.md. - Sanitization: No explicit sanitization or filtering of the retrieved Instagram content is described in the prompt instructions.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute bash commands using a local CLI tool.
- Evidence: Multiple examples of terminal commands using
~/teneo-skill/teneoare provided inSKILL.mdto perform data retrieval. - [EXTERNAL_DOWNLOADS]: The skill references source code and SDKs hosted on GitHub.
- Evidence: References to
github.com/TeneoProtocolAI/teneo-skillsandgithub.com/TeneoProtocolAI/teneo-agent-sdkare found inSKILL.md. These resources originate from the vendor's official GitHub organization.
Audit Metadata