end-to-end-news-signal
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts from associated scraping skills (such as twitter-scraper and reddit-scraper) to automate data gathering from social and news platforms.\n- [EXTERNAL_DOWNLOADS]: Fetches business signals and news events from well-known services including Twitter, Reddit, and Hacker News.\n- [PROMPT_INJECTION]: The skill processes untrusted content from the web to generate outreach emails, creating a surface for indirect prompt injection.\n
- Ingestion points: News data enters via Step 1 from multiple external platforms.\n
- Boundary markers: The instructions do not define specific delimiters for separating untrusted news content from the agent's internal instructions.\n
- Capability inventory: The skill has access to subprocess execution (Step 1), filesystem writes for configuration and export (Steps 0 and 6), and network tools for scraping.\n
- Sanitization: No explicit sanitization or filtering of news headlines or summaries is mentioned prior to email generation.
Audit Metadata