yt-plan
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data that could contain malicious instructions.
- Ingestion points: Reads YouTube post history and audience insights via
list_channel_postsandget_insightstools, and reads a local user profile at~/.uplika/<workspace-slug>/voice.md. - Boundary markers: The instructions do not specify the use of delimiters (like triple backticks) or clear 'ignore instructions' warnings when interpolating this external data into the agent's context.
- Capability inventory: The skill has the capability to write to external services via the
publishtool, which schedules and uploads content to YouTube. - Sanitization: There are no instructions provided to sanitize, filter, or escape the content fetched from YouTube or the local profile before it influences the agent's output.
Audit Metadata