homeowner-question-content

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The documentation provides instructions for users to install the skill and its dependencies using command-line tools such as npx and platform-specific plugin managers.
  • [EXTERNAL_DOWNLOADS]: The skill connects to a remote Model Context Protocol (MCP) server hosted at mcp.unifapi.com and references installation packages from the vendor's (unifapi-agent) official repository.
  • [PROMPT_INJECTION]: The skill ingests and processes untrusted data from external sources, including Reddit comments and public news articles, which presents an indirect prompt injection surface.
  • Ingestion points: Data is pulled from Reddit (reddit/posts/{id}/comments), news searches (news/search), and SEO tools (SKILL.md Workflow steps 2 and 3).
  • Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the ingested data defined in the skill instructions.
  • Capability inventory: The skill is restricted to research and planning. It generates structured markdown reports and scoring tables but does not possess capabilities for file writing, shell execution, or unauthorized network operations.
  • Sanitization: The skill does not implement explicit text sanitization, though it instructs the agent to label and distinguish between raw source data and its own analytical deductions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 04:06 PM
Security Audit — agent-trust-hub — homeowner-question-content