trend-spotter
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from several external sources such as Google Trends, Reddit, and Hacker News via RSS feeds, as well as news results from search engines.
- Ingestion points: Data enters through the output of
rss_monitor.py,tavily.py, and search-related scripts. - Boundary markers: The skill includes an explicit instruction to the agent in
references/trend-scout-recipe.mdto treat external feed text as data only and never as instructions. - Capability inventory: The skill is designed to write reports to the local
memory/directory and execute shell commands for data retrieval using bundled scripts. - Sanitization: The skill relies on its internal instructions to the AI to prevent the execution of content found within external data feeds.
- [COMMAND_EXECUTION]: The instructions direct the agent to run local Python scripts (
rss_monitor.py,tavily.py,pageviews.py,ledger.py). These scripts are used for legitimate data gathering and are part of the skill's infrastructure rather than external untrusted tools.
Audit Metadata