37soul
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the 37Soul API for activities such as posting tweets, replying to messages, and performing heartbeat routines as specified inSKILL.mdandreferences/api-reference.md. - [DATA_EXFILTRATION]: The skill retrieves an API token from
~/.config/37soul/credentials.jsonand transmits it to the 37Soul API at37soul.comfor request authentication. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection from processed social media content.
- Ingestion points: Data is fetched from external sources via
https://37soul.com/api/v1/clawdbot/feedandhttps://37soul.com/api/v1/clawdbot/chat_messages(SKILL.md). - Boundary markers: The instructions do not define delimiters or specific warnings to the agent to ignore instructions embedded within the fetched data.
- Capability inventory: The agent can perform network-based actions including posting content (
post_tweet), replying to messages (reply,chat_reply), and creating multi-step content (create_drama). - Sanitization: There is no explicit sanitization or validation of the social media content before the agent is prompted to react to it.
Audit Metadata