pulse
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from multiple external sources including Reddit, Hacker News, and the open web. It lacks explicit boundary delimiters (e.g. XML tags) for this external content, creating a surface where embedded instructions could potentially influence the agent's summary or file-writing behavior. Evidence: Ingestion points in Phases 1-3 via tool calls; boundary markers are absent; capabilities include file writing and local script execution; sanitization is limited to structural cleaning.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts using shell commands that include user-provided strings (like the research topic). While the instructions specify quoting the topic, a maliciously crafted topic string could attempt to break out of the command context if the agent does not apply additional sanitization.
Audit Metadata