community-discovery
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected in the skill instructions. The author's domain (superamped.com) is consistent with the provided author identity.
- [NO_CODE]: The skill consists entirely of natural language instructions and does not bundle any executable scripts, binaries, or software packages.
- [EXTERNAL_DOWNLOADS]: The skill utilizes several third-party community directories (e.g., hive.one, slofile.com, disboard.org) for data collection. These are well-known services for community discovery and are documented neutrally.
- [PROMPT_INJECTION]: The skill defines an ingestion surface for untrusted data (community descriptions and names) gathered from external social platforms.
- Ingestion points: Web search results and community metadata from Reddit, Discord, and Slack directories.
- Boundary markers: The instructions do not explicitly define delimiters for untrusted external content.
- Capability inventory: The skill lacks sensitive capabilities such as file system writing, credential access, or arbitrary command execution.
- Sanitization: No explicit sanitization or filtering of external content is described prior to agent processing.
Audit Metadata