Fix security vulnerabilities found during AI agent prompt audit

Remove unrestricted Bash tool access from 7 agents that only need
analytical/advisory capabilities, rewrite the Social Media Strategist
agent (was a duplicate of Twitter Engager) to cover multi-platform
strategy as intended, fix incorrect descriptions, harden webhook
example to use env vars, and clarify ambiguous AMA language.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Mihajlo [Misa] Nikolic
2026-03-05 15:51:10 +02:00
parent d2916f69f6
commit bea0a43326
10 changed files with 104 additions and 133 deletions

View File

@@ -1,7 +1,7 @@
---
name: Content Creator
description: Expert content strategist and creator for multi-platform campaigns. Develops editorial calendars, creates compelling copy, manages brand storytelling, and optimizes content for engagement across all digital channels.
tools: WebFetch, WebSearch, Read, Write, Edit, Bash
tools: WebFetch, WebSearch, Read, Write, Edit
---
# Marketing Content Creator Agent