content-opportunity-brief
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external sources including Reddit comments, YouTube descriptions, and X posts through the UnifAPI tool. This creates a surface for indirect prompt injection.
- Ingestion points: Data retrieved from
reddit/posts/{id}/comments,youtube/search,tiktok/search, andx/tweets/search/recentis incorporated into the agent's context as defined inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for the ingested social media content within the prompt templates.
- Capability inventory: The skill is limited to read-only tool calls and generating a markdown report; it does not possess capabilities for file modification, code execution, or privileged system access across any of its scripts (SKILL.md, README.md).
- Sanitization: The instructions do not specify any sanitization or filtering of the retrieved social media text before it is analyzed by the model.
- [EXTERNAL_DOWNLOADS]: The skill documentation references installing plugins from the
unifapi-agent/agentsmarketplace and suggests using tools fromunifapi.com. These are official vendor resources provided by the skill author for the intended functionality of the agent.
Audit Metadata