community-ops-report
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-generated content such as posts and comments from external community platforms, creating a potential surface for adversarial content to influence the agent.
- Ingestion points: Untrusted data is retrieved through the
ae-cli community +get_post_detailandae-cli community +get_comments_summarycommands defined inSKILL.md. - Boundary markers: The instructions do not specify the use of clear delimiters or explicit warnings for the agent to ignore potential instructions embedded within the community content.
- Capability inventory: The skill focus is restricted to synthesizing data and generating Markdown reports; it does not utilize capabilities for file writing, arbitrary command execution, or outbound network operations.
- Sanitization: No explicit logic or instructions are provided for sanitizing or filtering the content retrieved from the community tools before it is processed by the agent.
Audit Metadata