Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Instagram Graph API (graph.facebook.com) for media retrieval, hashtag searches, and content publishing. - [COMMAND_EXECUTION]: References a vendor-specific diagnostic tool
zero doctorused to validate connection parameters and environment variables. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it instructs the agent to fetch and handle untrusted content from the Instagram platform.
- Ingestion points: API response fields such as
captionandrecent_mediadescribed in Section 1 and Section 3.2 ofSKILL.md. - Boundary markers: No markers are defined to isolate retrieved data from the agent's instructions.
- Capability inventory: The skill utilizes shell execution via
curland can write temporary JSON data to/tmp/request.json. - Sanitization: No specific filtering or sanitization of the external API content is implemented before processing.
Audit Metadata