news-aggregator-skill
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates only with well-known and reputable news domains such as GitHub, Hacker News, and Weibo. No suspicious external connections or data exfiltration attempts were found.\n- [SAFE]: The Python dependencies (
requests,beautifulsoup4) are industry-standard libraries for web scraping, and the code does not download or execute any unverifiable remote scripts.\n- [SAFE]: No obfuscation, persistence mechanisms, or hardcoded credentials were detected in the scripts or metadata.\n- [SAFE]: The logic for deep-fetching article content includes reasonable safety measures such as network timeouts and character limits to prevent resource exhaustion.\n- [SAFE]: While the skill ingests external web content (a surface for indirect prompt injection), this is the primary intended function of the news aggregator, and the script contains no logic that would interpret this data as executable code or commands.
Audit Metadata