skills/thinkingaiagenticengine/scenario-skills/community-analyzing-theme-comment/Gen Agent Trust Hub
community-analyzing-theme-comment
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process untrusted user-generated content (community comments) via the
ae-clitool as its primary data source (Step 2 in SKILL.md). - Ingestion points: External community comments are ingested through
ae-cli community +get_post_detailandae-cli community +search_posts. - Boundary markers: The instructions do not define specific delimiters or instructions to treat the comment text as data rather than instructions, potentially allowing the agent to follow directions hidden within user comments during the synthesis phase.
- Capability inventory: The skill has read access to community data and output generation capabilities; it does not possess file-writing, network-sending (beyond the CLI tool), or arbitrary code execution capabilities.
- Sanitization: The skill includes basic filtering for spam, duplicates, and short/emoji-only content, though these filters are intended for data quality rather than security sanitization.
Audit Metadata