Content Trend Analyzer

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:22 AM UTC
• Version: 1.0.0

Overview

This skill is a markdown-only content trend research guide that uses public web research to produce article outlines, with no code execution or persistence.

Install this if you want an agent to research public trend signals across several platforms and turn them into content recommendations. Expect it to use web access and cite sources; clarify target platform, region, language, and timeframe when invoking it to avoid overly broad research.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger keywords and description are broad enough to match many generic content-planning or topic-selection requests, which can cause the skill to activate outside its intended niche. Over-broad activation increases the chance of inappropriate tool usage, unnecessary web access, and unexpected delegation of user requests to a skill that performs multi-step external data collection.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: This markdown file consists entirely of article-outline templates written as prescriptive headings, prompts, and example phrasing in English, with no indication that other languages are supported or that English is optional. Under the policy rule for natural-language constraints, this reads as a default language requirement without user opt-in or a stated region-specific justification.

Scope Creep

Low

• Category: Excessive Agency

Content

---
name: content-trend-analyzer
description: Cross-platform content trend analysis and outline generation tool. Platforms covered include but are not limited to: Google Trends, Reddit, YouTube, Medium, Substack, Twitter/X, Zhihu, Weibo, Douyin, Bilibili, Baidu Index, WeChat Official Accounts, GitHub Trending, Product Hunt.
---

# Content Trend Analyzer

• Confidence: 70% confidence
• Finding: Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Natural-Language Policy Violations

Low

• Confidence: 77% confidence
• Finding: This reference prescribes a single language for the skill content and workflow context, including sections on Zhihu, Weibo, and Baidu Index, but does not indicate that users may choose another language or locale. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation.

Static analysis

No suspicious patterns detected.