fetch-news
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- Public Data Retrieval: The skill fetches news content from well-known and public services such as Google News RSS and the Hacker News API. These operations do not require authentication or credentials and are performed using standard HTTP requests.
- Data Handling: The script processes external news data (RSS feeds and JSON) by cleaning HTML tags and unescaping entities. This is a standard practice for displaying news summaries. The resulting data is stored in a local workspace file for deduplication between runs.
- Workspace Usage: The skill interacts with files in a
.agents/workspacedirectory to manage user interests and track previously seen items. This state management is localized and intended to provide a curated experience for the user. - Standard Dependencies: The script relies solely on Python's built-in standard libraries (e.g.,
urllib,json,xml.etree.ElementTree), which minimizes the risk of external package vulnerabilities.
Audit Metadata