trend-scout
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/fetch-trends.shbuilds Python commands by interpolating shell variables (${LIMIT}) into strings passed topython3 -c. This creates a code injection risk if the agent passes unsanitized user input as script arguments. - [EXTERNAL_DOWNLOADS]: The skill fetches public data from
reddit.comandhacker-news.firebaseio.comfor analysis and curation. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes untrusted data from external sources and incorporates it into content generation workflows.
- Ingestion points: Data retrieved from Reddit, Hacker News, and Indie Hackers via scripts and search tools.
- Boundary markers: None; there are no clear delimiters or instructions to treat external data as untrusted text.
- Capability inventory: The skill's primary function is text curation; it does not invoke high-privilege tools or perform file/network operations based on the ingested content.
- Sanitization: The skill does not filter or sanitize the external data before it is presented to the language model for curation.
Audit Metadata