hashtag-research
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
tikhub-find-endpointCLI tool to resolve API paths for various social platforms, which is an expected behavior for a vendor-specific integration. - [PROMPT_INJECTION]: The skill ingests untrusted data from social media platforms (TikTok, Instagram, etc.), which is a known surface for indirect prompt injection. This is a functional requirement for hashtag research.
- Ingestion points: Social media content retrieved from platform APIs (TikTok, Instagram, etc.) as described in the workflow.
- Boundary markers: None specified in the workflow instructions.
- Capability inventory: Shell command execution for endpoint discovery.
- Sanitization: No specific filtering or sanitization steps are defined for the ingested social media data.
Audit Metadata