newsjack-detector

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on a local binary tool named newsjack to execute its detection, filtering, and reporting pipeline. It provides instructions for verifying the tool's version and location before execution.
  • [EXTERNAL_DOWNLOADS]: The skill monitors news data from established services and regulatory bodies, including Google News, Techmeme, Reuters, and official press feeds from the FTC and SEC.
  • [DATA_EXFILTRATION]: Contextual information about identified PR opportunities is passed to the Medialyst service via URL-encoded parameters in a browser deep link. The instructions explicitly caution against including sensitive information like credentials in these prompts.
  • [INDIRECT_PROMPT_INJECTION]: Since the skill ingests and analyzes news content from external web sources (such as news search and X), it is exposed to potential indirect prompt injection attacks. It mitigates these risks by applying mandatory safety doctrines and mechanical hygiene filters.
  • [DYNAMIC_EXECUTION]: The skill manages a multi-stage pipeline that involves writing and updating various JSON artifacts and Markdown reports within a local timestamped directory on the filesystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 03:25 AM