anysite-brand-reputation
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill is designed for brand reputation monitoring through authorized MCP tools. No indicators of malicious intent, unauthorized file access, or network exfiltration were discovered. All described workflows align with the skill's stated purpose.
- [PROMPT_INJECTION]: The skill functions by ingesting untrusted user-generated content from external social media platforms, which constitutes a surface for indirect prompt injection. However, since the skill is restricted to information gathering and sentiment analysis without access to high-risk capabilities like shell execution or local file writing, the associated risk is negligible.
- Ingestion points: Social media posts and comments are fetched via tools such as search_twitter_posts, get_reddit_post_comments, and search_youtube_videos as documented in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructional guards to isolate untrusted external content from agent instructions.
- Capability inventory: The skill is limited to read-only social media API interactions; no tools for filesystem modification, code execution, or credential access are present.
- Sanitization: No explicit content filtering or sanitization protocols are mentioned in the provided guidance.
- [NO_CODE]: The skill package does not include any executable scripts (Python, JavaScript, etc.); it consists entirely of instructional markdown and configuration metadata.
Audit Metadata