google-news-search

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to https://ai-factory.frevana.com to fetch news data. This is the official API endpoint for the service provided by the author (FinpeakInc).
  • [COMMAND_EXECUTION]: The skill uses a bash script (search_google_news.sh) to orchestrate the search process. This script performs routine operations such as checking for curl and python3, managing temporary files, and making network requests.
  • [DATA_EXFILTRATION]: While the skill transmits user queries to an external API, this is the intended primary purpose of the skill. Sensitive data like the FREVANA_TOKEN is handled via environment variables or secure command-line arguments and is explicitly not echoed back to the user.
  • [DYNAMIC_EXECUTION]: The bash script uses python3 to safely encode and decode JSON payloads. The Python code is provided as a static heredoc within the script, preventing external injection of code into the execution path.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 12:25 AM
Security Audit — agent-trust-hub — google-news-search