bbc-news
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches news content from the official BBC domain (
feeds.bbci.co.uk). This is a well-known and trusted service used for its intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes headlines and descriptions from external RSS feeds, which represents a potential injection surface if the source were compromised.
- Ingestion points: News content is ingested in
scripts/bbc_news.pyvia the feedparser library. - Boundary markers: No specific delimiters or safety warnings are implemented in the script's text output.
- Capability inventory: Analysis of
scripts/bbc_news.pyconfirms there are no subprocess calls, file system write operations, or unauthorized network requests. - Sanitization: The script includes regular expression logic to strip HTML tags from news descriptions before they are displayed to the user.
Audit Metadata