gdelt-research
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data from global news outlets and TV transcripts via the GDELT Project.
- Ingestion points: Data is retrieved from
https://api.crawlora.netendpoints using thescripts/crawlora.shhelper. - Boundary markers: The skill returns content in normalized JSON format, which provides structure but does not include explicit instructions to the LLM to ignore embedded instructions within the news text.
- Capability inventory: The skill has the capability to perform network requests (
curl) and local script execution to retrieve and format news data. - Sanitization: User-provided arguments are URL-encoded via
curl --data-urlencodein the wrapper script to prevent command or parameter injection into the API request.
Audit Metadata