ink-distribute
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Bash command to search for local Markdown files containing keywords like 'newsletter' or 'twitter'. This command is static, limited to text files, and does not incorporate untrusted user input, making it a safe method for context gathering.
- [PROMPT_INJECTION]: The skill ingests untrusted text (articles or posts provided by the user) to generate distribution plans. While this represents a surface for indirect prompt injection, the skill lacks tools for network access or sensitive file modification, effectively neutralizing the potential impact of such an attack.
Audit Metadata