gate-news-intel
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes maintenance scripts (
scripts/update-skill.shandscripts/update-skill.ps1) that download updates from the author's repository atgithub.com/gate/gate-skills. These scripts usegit clone,curl, orwgetto retrieve and overwrite local skill files. - [INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect prompt injection as it aggregates content from news articles, social media (X, Reddit), and UGC (YouTube) to generate reports.
- Ingestion points: Untrusted external data is ingested through various
gate-clinews feed commands likesearch-newsandsearch-ugc. - Boundary markers: The instructions tell the agent to label sources and separate facts from opinions, but there are no technical delimiters used to isolate external text from the agent's instructions.
- Capability inventory: The skill has the ability to execute system commands via the
gate-cliinterface. - Sanitization: No explicit filtering or sanitization process for the ingested news or social content is described.
- [COMMAND_EXECUTION]: The skill relies on the execution of
gate-clicommands on the host machine to gather data and perform its functions.
Audit Metadata