pr-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
newsjackCLI to perform functional tasks such as querying calendar data (newsjack pr-calendar query), managing user authentication (newsjack login), and researching news (newsjack news search). - [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting data from the Medialyst PR calendar API and external news search results.
- Ingestion points: Data entries from
newsjack pr-calendar queryand search results fromnewsjack news searchin SKILL.md. - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore potentially malicious content within the fetched data.
- Capability inventory: The skill is capable of executing shell commands via the
newsjackCLI tool as described in SKILL.md. - Sanitization: Absent; there are no explicit sanitization procedures for the external data before it is processed by the AI.
- [EXTERNAL_DOWNLOADS]: The skill connects to the Medialyst API to retrieve calendar and news data, which is an integral part of its function.
Audit Metadata