tageszeitung
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script tageszeitung_core.py uses subprocess.run to invoke msedge.exe for HTML-to-PDF conversion. The call in _html_to_pdf uses a list of arguments and avoids shell=True, preventing command injection vulnerabilities from the configured output paths or date strings.
- [EXTERNAL_DOWNLOADS]: The skill fetches external content from RSS feeds and web URLs provided by the user. Functions like _fetch_rss_stdlib and _fetch_web_title use urllib.request.urlopen to download feed data.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources. 1. Ingestion points: RSS and Web feed content fetched via urllib in tageszeitung_core.py. 2. Boundary markers: The skill uses _strip_html to remove tags and _html.escape to sanitize content before rendering it into the HTML template. 3. Capability inventory: Local file system access (SQLite, PDF writes), network access (fetching feeds), and command execution (Edge PDF rendering). 4. Sanitization: Proactively mitigates XXE attacks by using defusedxml or a regex-based fallback to avoid unsafe standard library XML parsers.
Audit Metadata