xhs-content-ops
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local script at
scripts/cli.pyto perform its core functions. It defines multiple subcommands such assearch-feeds,publish, andpost-comment. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface (Category 8).
- Ingestion points: External data is ingested through the
get-feed-detailandsearch-feedscommands which fetch user comments and note content. - Boundary markers: Absent; there are no delimiters or specific instructions to treat fetched content as untrusted data.
- Capability inventory: The skill has the capability to execute network-bound commands including
publishandpost-commentusing the local CLI script. - Sanitization: No sanitization or validation of the fetched external content is performed before the agent processes or analyzes it.
Audit Metadata