customer-research
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to an external Model Context Protocol (MCP) server at
https://mcp.unifapi.comto fetch data. - [EXTERNAL_DOWNLOADS]: Instructions for installation involve using
npxto add packages from theunifapi-agentrepository, which is the official source for this skill. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection because it ingests and processes untrusted content from public forums (Reddit, TikTok comments).
- Ingestion points: Specifically fetches data using
reddit/posts/{id}/commentsandtiktok/videos/{id}/comments(referenced inSKILL.md). - Boundary markers: The skill uses structured output templates but lacks specific instructions to ignore embedded commands within the fetched social media text.
- Capability inventory: The skill is restricted to read-only operations and does not possess capabilities for file writing, arbitrary command execution, or network exfiltration beyond the vendor API.
- Sanitization: No explicit sanitization or filtering of the external social media content is described in the provided scripts.
Audit Metadata