coverage-tracker
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
newsjackCLI utility and the systemdatecommand to perform its primary function of tracking and recording keyword coverage inSKILL.md. - [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection.
- Ingestion points: Untrusted article snippets, titles, and summaries are ingested through the
news-searchtool output as defined inSKILL.md. - Boundary markers: No delimiters or instructions to ignore embedded commands are present in the logic for processing external content.
- Capability inventory: The agent has capabilities for shell execution (
newsjack) and filesystem write operations (creation ofcandidates.jsonanddecisions.json) which could be abused if an injection is successful. - Sanitization: There is no evidence of content validation or sanitization for the search results before they are processed by the LLM.
Audit Metadata