hacker-news-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to the Algolia Hacker News Search API (hn.algolia.com), which is a well-known and public service. It utilizes the standard 'requests' Python library for these operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill serves as a vector for untrusted data as it retrieves content from the web.\n
- Ingestion points: The script
scripts/search_hn.pyingests titles and text from Hacker News stories and comments.\n - Boundary markers: None. Data is returned as structured JSON or summary text without specific delimiters to isolate potential instructions in the content.\n
- Capability inventory: The skill's capabilities are limited to network GET requests to a specific domain and stdout; it lacks file system write access or subprocess execution.\n
- Sanitization: No sanitization is performed on the retrieved text, meaning any instructions embedded in HN comments will be passed to the agent context.
Audit Metadata