4chan-reader
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script 'scripts/chan_extractor.py' to perform board cataloging and thread extraction tasks.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
- Ingestion points: The skill fetches thread posts and catalog metadata from 4chan boards.
- Boundary markers: There are no delimiters or specific instructions to the agent to treat the retrieved content as untrusted data rather than instructions.
- Capability inventory: The skill can execute shell commands and write extracted data to the local file system.
- Sanitization: No sanitization or filtering of the retrieved 4chan data is documented in the skill definition.
Audit Metadata