viral-launch-pipeline
Warn
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The file
references/research-sources.mdcontains instructions for the agent to recommend and install theagent-browserpackage globally using the commandnpm install -g agent-browser. This dependency is not from a verified or trusted vendor. - [COMMAND_EXECUTION]: The skill executes local commands, including the validation script
python3 scripts/validate_launch_pack.pymentioned inSKILL.mdand the shell-based interaction commands for theagent-browsertool inreferences/research-sources.md. - [PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection (Category 8).
- Ingestion points: The skill researches and ingests data from external, untrusted sources including Reddit, X/Twitter, LinkedIn, and various competitor websites as defined in
references/research-sources.md. - Boundary markers: The personality prompts for subagents in
references/subagent-orchestration.mdlack explicit delimiters or instructions to ignore malicious directives potentially embedded in the researched data. - Capability inventory: The agent has the capability to write files to the local file system and execute shell commands (
python3,agent-browser). - Sanitization: No sanitization or validation of the retrieved web content is specified before the data is incorporated into the agent's context or used to generate copy.
Audit Metadata