content-track
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests raw text from LinkedIn exports (CSV/XLSX) and local markdown drafts to perform automated classification, resonance scoring, and strategy calibration. This content is untrusted and could contain instructions meant to influence the agent's logic.
- Ingestion points: The script
scripts/build_archive.pyreads post text from local*.mdfiles and LinkedInShares.csvexports. - Boundary markers: No explicit boundary markers or "ignore instructions" delimiters are used when processing the ingested text.
- Capability inventory: The agent has the capability to write to the local file system (
posts.jsonl,ANGLES.md), send messages via Telegram, and deploy dashboards to Cloudflare Pages. - Sanitization: No sanitization or escaping of the external content is observed before it is used for classification or reporting.
- [COMMAND_EXECUTION]: The skill requires the agent to execute a provided Python script (
build_archive.py) to process and merge data. It also suggests using shell commands likefindto determine the script's local path. - [EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of the
openpyxlPython library from the official package registry to enable Excel file parsing.
Audit Metadata