rust-daily
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from various external sources including Reddit (r/rust) and community blogs.
- Ingestion points: Web content fetched from
reddit.com,this-week-in-rust.org, and other community sites viaagent-browserandWebFetch(found inSKILL.md). - Boundary markers: Absent. The instructions do not specify delimiters or security warnings to prevent the agent from obeying instructions that might be embedded in the fetched news or comments.
- Capability inventory: Access to
agent-browser(network/shell),WebFetch(network),mcp__actionbooktools, and the ability to spawn subagents via theTaskcommand. - Sanitization: Absent. The raw text extracted from web pages is passed directly into the agent's context and formatted into reports.
- [COMMAND_EXECUTION]: The skill executes the
agent-browsercommand-line tool to interact with websites, open URLs, and extract content using CSS selectors. - [DYNAMIC_EXECUTION]: In its 'Agent Mode' workflow, the skill attempts to read a file located at
../../agents/rust-daily-reporter.mdand uses its raw content as the prompt for a newgeneral-purposesubagent task. This allows the skill's behavior to be dynamically determined by the content of a file located outside its own directory.
Audit Metadata