blogwatcher
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill fetches and processes data from external RSS feeds, which are untrusted sources. Maliciously crafted feed entries could attempt to influence the agent's behavior during the summarization phase.
- Ingestion points: RSS content is retrieved from external URLs using the
feedparserlibrary as shown in the code examples withinSKILL.md. - Boundary markers: The suggested LLM prompt for synthesizing research updates lacks delimiters or specific instructions to ignore embedded commands within the source text.
- Capability inventory: The skill demonstrates file system write capabilities by saving processed data to
feed_digest.json. - Sanitization: There is no evidence of sanitization or validation of external content prior to interpolation into the LLM prompt.
Audit Metadata