write-social-post
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content fetched from user-provided URLs.
- Ingestion points: The skill uses
curlandtrafilaturato fetch and parse external websites and GitHub READMEs (SKILL.md). - Boundary markers: There are no explicit instructions to the AI to ignore instructions found within the fetched content or use specific delimiters.
- Capability inventory: The skill uses the
Bashtool to executecurlanduvx trafilatura, bringing external data into the agent context (SKILL.md). - Sanitization: No explicit sanitization or filtering of the fetched content is described.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute bash commands to extract data.
- Evidence: Uses
curl -fsSL "<URL>" | uvx trafilatura --recall --output-format markdownto fetch and process external content (SKILL.md). - [EXTERNAL_DOWNLOADS]: The skill fetches content from external sources at runtime.
- Evidence: Fetches Markdown files from
raw.githubusercontent.comand other web content usingcurl(SKILL.md).
Audit Metadata