tdg-personal/social-graph-ranker
Weighted social-graph ranking for warm intro discovery, bridge scoring, and network gap analysis across X and LinkedIn. Use when the user wants the reusable graph-ranking engine itself, not the broader outreach or network-maintenance workflow layered on top of it.
60
76%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill's workflow explicitly instructs "Pull the user's graph from X, LinkedIn, or both" in SKILL.md, meaning it ingests user-generated social-network data from public third-party platforms which the agent reads and uses to drive ranking and action decisions, enabling indirect prompt-injection risk.
Where we found it
x.com
domain · 4 sites
The plugin instructs the agent to pull the user's social graph from X (formerly Twitter), ingesting third-party user-generated content that could contain adversarial payloads for indirect prompt injection.
SKILL.md
3
across X and LinkedIn
SKILL.md
38
the user's current graph on X, LinkedIn, or both
SKILL.md
112
Pull the user's graph from X, LinkedIn, or both.
SKILL.md
154
`x-api` provides X graph access and optional execution paths
linkedin.com
domain · 3 sites
The plugin instructs the agent to pull the user's social graph from LinkedIn, ingesting third-party user-generated content that could contain adversarial payloads for indirect prompt injection.
SKILL.md
3
across X and LinkedIn
SKILL.md
38
the user's current graph on X, LinkedIn, or both
SKILL.md
112
Pull the user's graph from X, LinkedIn, or both.
- Audited
- Security analysis