gate-news-intel

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes maintenance scripts (scripts/update-skill.sh and scripts/update-skill.ps1) that download updates from the author's repository at github.com/gate/gate-skills. These scripts use git clone, curl, or wget to retrieve and overwrite local skill files.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect prompt injection as it aggregates content from news articles, social media (X, Reddit), and UGC (YouTube) to generate reports.
  • Ingestion points: Untrusted external data is ingested through various gate-cli news feed commands like search-news and search-ugc.
  • Boundary markers: The instructions tell the agent to label sources and separate facts from opinions, but there are no technical delimiters used to isolate external text from the agent's instructions.
  • Capability inventory: The skill has the ability to execute system commands via the gate-cli interface.
  • Sanitization: No explicit filtering or sanitization process for the ingested news or social content is described.
  • [COMMAND_EXECUTION]: The skill relies on the execution of gate-cli commands on the host machine to gather data and perform its functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:04 AM