skills/elvisun/newsjack/news-search/Gen Agent Trust Hub

news-search

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with the local system by executing shell commands using the newsjack CLI. Specifically, it uses newsjack auth status to check credentials, newsjack login for authentication, and newsjack news search to perform queries.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (news articles and web pages), which could contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: The skill reads article titles, URLs, outlet names, and author information from results provided by the newsjack CLI or host web search (SKILL.md).
  • Boundary markers: No explicit delimiters or boundary markers (such as XML tags or triple quotes) are defined to separate external data from the skill's instructions.
  • Capability inventory: The agent has the capability to execute shell commands (newsjack CLI) and perform web browsing actions (SKILL.md).
  • Sanitization: The instructions do not specify any validation, filtering, or sanitization of the fetched article content before it is presented to the user or passed to other skills.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:34 PM