public-relations
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external news and social media sources to support its PR research workflows.
- Ingestion points: The skill fetches data from Google News RSS, Hacker News (via Algolia), and Reddit, and scrapes journalist profiles and articles using the
dev-browsertool as described inreferences/newsjacking.md,references/journalist-pitching.md, andreferences/podcast-guest-prep.md. - Boundary markers: In
references/newsjacking.md, there is an explicit warning that external articles and posts are untrusted and that the agent must not follow instructions embedded within them. - Capability inventory: The agent is instructed to use
curlfor network requests anddev-browserfor web navigation and scraping across several reference files. - Sanitization: The skill relies on instructional guardrails provided in the text to prevent the agent from obeying instructions found in external data.
- [COMMAND_EXECUTION]: The skill provides shell commands for the agent to use in its workflow.
- Evidence:
references/newsjacking.mdcontains examples of usingcurlpiped intojqandxmllintfor data processing. It also includes the commandbrew install jqto set up the environment. - [EXTERNAL_DOWNLOADS]: The skill performs automated network operations to retrieve data from well-known services.
- Evidence: The skill fetches RSS feeds and JSON data from
news.google.com,hn.algolia.com, andreddit.comto identify trending topics for media outreach.
Audit Metadata