homeowner-question-content
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation provides instructions for users to install the skill and its dependencies using command-line tools such as
npxand platform-specific plugin managers. - [EXTERNAL_DOWNLOADS]: The skill connects to a remote Model Context Protocol (MCP) server hosted at
mcp.unifapi.comand references installation packages from the vendor's (unifapi-agent) official repository. - [PROMPT_INJECTION]: The skill ingests and processes untrusted data from external sources, including Reddit comments and public news articles, which presents an indirect prompt injection surface.
- Ingestion points: Data is pulled from Reddit (
reddit/posts/{id}/comments), news searches (news/search), and SEO tools (SKILL.md Workflow steps 2 and 3). - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the ingested data defined in the skill instructions.
- Capability inventory: The skill is restricted to research and planning. It generates structured markdown reports and scoring tables but does not possess capabilities for file writing, shell execution, or unauthorized network operations.
- Sanitization: The skill does not implement explicit text sanitization, though it instructs the agent to label and distinguish between raw source data and its own analytical deductions.
Audit Metadata