The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches data from well-known news organizations and aggregators including Reuters, AP News, BBC, Al Jazeera, The Guardian, NPR, Google News, Bing News, Hacker News, and Reddit via their official RSS feeds. These are established, reputable services.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external RSS feeds, creating a surface for potential indirect prompt injection attacks where malicious instructions could be embedded in news headlines or summaries.
Ingestion points: External RSS feed URLs listed in SKILL.md and used in the JavaScript fetch script.
Boundary markers: None identified; external content is processed directly for summarization.
Capability inventory: The skill is limited to network fetching (RSS) and text summarization. No file system writes or shell command execution capabilities are utilized.
Sanitization: No explicit sanitization or filtering of RSS content is implemented beyond time-based filtering.

news-aggregation