buffer
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The script utilizes
curlandjqfor API communication and response parsing. Input parameters are safely passed tojqusing arguments to prevent shell command injection.\n- [DATA_EXFILTRATION]: The skill transmits social media content and metadata toapi.buffer.com. This is the documented and expected endpoint for the Buffer service, and the data sent corresponds to the skill's purpose of managing social media posts.\n- [PROMPT_INJECTION]: The skill ingests untrusted text data (post content and idea details) which could contain malicious instructions designed to influence the agent's behavior during social media management tasks.\n - Ingestion points: The
--textparameter increate-postand--title/--textparameters increate-ideawithinscripts/buffer.sh.\n - Boundary markers: The script does not implement delimiters or safety warnings for the ingested text.\n
- Capability inventory: The skill has network access via
curltoapi.buffer.comand local execution capabilities viajq.\n - Sanitization: Data is JSON-encoded via
jqbefore transmission to prevent structure breakage, but instructions are not filtered or sanitized.
Audit Metadata