aibtc-news-fact-checker
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlto retrieve blockchain and market data frommempool.spaceandcoinbase.com, and usesbun runto execute local scripts within the skill's environment. These commands are necessary for the skill's functionality and target reputable sources. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from news signals which poses a vulnerability surface for instruction injection.
- Ingestion points: Untrusted content is ingested via the
news_signalstool as defined inSKILL.md. - Boundary markers: The skill does not employ delimiters or explicit instructions to the agent to ignore content-embedded commands.
- Capability inventory: The agent can perform write operations to the platform, specifically filing corrections and reports via the
news_correct_signalandnews_file_signaltools. - Sanitization: No sanitization or filtering of the ingested signal content is specified in the skill instructions.
Audit Metadata