public-relations

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external news and social media sources to support its PR research workflows.
  • Ingestion points: The skill fetches data from Google News RSS, Hacker News (via Algolia), and Reddit, and scrapes journalist profiles and articles using the dev-browser tool as described in references/newsjacking.md, references/journalist-pitching.md, and references/podcast-guest-prep.md.
  • Boundary markers: In references/newsjacking.md, there is an explicit warning that external articles and posts are untrusted and that the agent must not follow instructions embedded within them.
  • Capability inventory: The agent is instructed to use curl for network requests and dev-browser for web navigation and scraping across several reference files.
  • Sanitization: The skill relies on instructional guardrails provided in the text to prevent the agent from obeying instructions found in external data.
  • [COMMAND_EXECUTION]: The skill provides shell commands for the agent to use in its workflow.
  • Evidence: references/newsjacking.md contains examples of using curl piped into jq and xmllint for data processing. It also includes the command brew install jq to set up the environment.
  • [EXTERNAL_DOWNLOADS]: The skill performs automated network operations to retrieve data from well-known services.
  • Evidence: The skill fetches RSS feeds and JSON data from news.google.com, hn.algolia.com, and reddit.com to identify trending topics for media outreach.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 02:38 PM