content-calendar

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided keyword lists and cluster maps to generate a publishing schedule. This ingested data is subsequently used to name files and as input for local scripts. The instructions do not specify sanitization or boundary markers for this external data, which could allow maliciously crafted keywords to influence agent behavior in the reporting phase.
  • [COMMAND_EXECUTION]: The skill relies on local Python scripts (scripts/dfs_client.py and scripts/report_publish.py) to fetch data and generate branded reports. The agent is instructed to run these scripts via the shell, passing keyword data and filenames as arguments. While this is the intended function, it represents the primary capability used to process external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 08:54 AM