curating-user-generated-content
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation and templates for content curation. No executable scripts or configuration files are included, which minimizes the attack surface.
- [SAFE]: The skill outlines standard professional workflows for identifying and securing permissions for customer-created content. All external resources mentioned, such as TINT, Yotpo, and Canva, are well-known and reputable marketing platforms.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting data from social media and review platforms (Instagram, TikTok, Twitter, Reddit). 1. Ingestion points: Social media posts and reviews identified in Step 2 discovery instructions. 2. Boundary markers: Absent. 3. Capability inventory: No code provided in skill; relies on agent's existing search capabilities. 4. Sanitization: Absent. The risk is evaluated as safe as it is inherent to the primary purpose of content curation and emphasizes manual review.
Audit Metadata