skills/yan-labs/yan-skills/blog/Gen Agent Trust Hub

blog

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from platforms like X (Twitter), Reddit, and YouTube to generate blog content. \n
  • Ingestion points: External URLs and summaries are stored in sources json files before being processed by LLMs.\n
  • Boundary markers: The writing instructions for Gemini 3.8 Flash include strict prohibitions against inventing facts and require every claim to be linked to a specific source entry.\n
  • Capability inventory: The skill can write to the local file system, execute local migration and review scripts, and trigger deployments via agent-fleet.\n
  • Sanitization: A mandatory review phase is performed by Claude Sonnet, which is tasked with cross-referencing all statements in the draft against the original source data to prevent hallucinations or the introduction of unverified information.\n- [COMMAND_EXECUTION]: The skill utilizes an orchestration tool (fleet-go) to manage tasks across different AI agents and runs local scripts for SEO analysis, image management, and repository migrations.\n- [EXTERNAL_DOWNLOADS]: The workflow involves fetching data from various external social media and documentation platforms for research and communicates with multiple external LLM providers.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 03:29 PM