social-media-generator — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  The skill allows an agent to generate social media content and save it to the local filesystem based on user-provided inputs. A critical security gap exists because the skill lacks input validation and boundary markers, making it vulnerable to Indirect Prompt Injection and Path Traversal. A malicious user could provide a crafted event name containing directory traversal sequences to overwrite sensitive local files.

  Risk: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONFeb 15, 2026Full report

• Socket

  pass

  No alerts

  Mar 18, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWFeb 15, 2026Full report

• Runlayer

  warn

  7/7 files flagged

  Risk: MEDIUMFeb 21, 2026Full report

• ZeroLeaks

  pass

  Score: 93/100 · 2 sections analyzed

  Risk: NONEApr 15, 2026Full report