shareplay-activities
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implementation patterns for
GroupSessionMessengerandGroupSessionJournaldefine a protocol for ingesting untrusted data from external participants, which represents an indirect prompt injection surface.\n - Ingestion points: Untrusted data enters the application context through the
messenger.messages(of:)stream inDrawingManager,SharePlayManager, andQuizManager(inreferences/shareplay-patterns.md).\n - Boundary markers: The code examples do not implement boundary markers or instructions to disregard potential commands embedded in shared messages.\n
- Capability inventory: The documented capabilities are limited to state synchronization and UI updates; no file-writing or command-execution tools are present in the skill.\n
- Sanitization: The patterns do not include logic for sanitizing or validating the content of the
Codablemessages before they are appended to local state.\n- [EXTERNAL_DOWNLOADS]: The skill contains multiple reference links to a non-standard domain (sosumi.ai) for documentation, rather than official vendor resources.
Audit Metadata