news-search
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local system by executing shell commands using the
newsjackCLI. Specifically, it usesnewsjack auth statusto check credentials,newsjack loginfor authentication, andnewsjack news searchto perform queries. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (news articles and web pages), which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill reads article titles, URLs, outlet names, and author information from results provided by the
newsjackCLI or host web search (SKILL.md). - Boundary markers: No explicit delimiters or boundary markers (such as XML tags or triple quotes) are defined to separate external data from the skill's instructions.
- Capability inventory: The agent has the capability to execute shell commands (
newsjackCLI) and perform web browsing actions (SKILL.md). - Sanitization: The instructions do not specify any validation, filtering, or sanitization of the fetched article content before it is presented to the user or passed to other skills.
Audit Metadata