social-post-writer

Pass

Audited by Gen Agent Trust Hub on Mar 2, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill incorporates untrusted user data into its generation process, creating a surface for indirect prompt injection.
  • Ingestion points: User-provided topics, ideas, and constraints defined in Step 1 of SKILL.md.
  • Boundary markers: The instructions do not define specific delimiters or security boundaries to isolate user-provided content from the agent's core instructions.
  • Capability inventory: The skill is restricted to text generation; it does not contain code for file manipulation, network access, or command execution.
  • Sanitization: No sanitization or validation mechanisms are present to filter or escape instructions embedded within user inputs.- [NO_CODE]: The analyzed skill consists entirely of markdown-based instructions for the AI agent. It does not include Python scripts, Node.js modules, binaries, or any other executable files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 2, 2026, 10:01 PM