bestblogs-explain
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
bestblogsCLI tool to retrieve analytics and profile data. It passes parameters like<id>and--daysto the shell environment. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes content from the
bestblogsCLI output. - Ingestion points: Data enters the context via CLI output fields such as
sourceName,selectionReason, andimplicitInterests(SKILL.md). - Boundary markers: None identified; output is interpolated directly into the response.
- Capability inventory: Command execution via the
bestblogsCLI (SKILL.md). - Sanitization: No evidence of validation for the CLI results before presentation.
Audit Metadata