technews
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches tech news stories from
techmeme.com, article content from third-party news websites, and social engagement data from the Hacker News Algolia API (hn.algolia.com) and Nitter (nitter.net). These are established technology news sources and APIs appropriate for the skill's purpose.- [PROMPT_INJECTION]: As a tool that fetches and processes untrusted web content for summarization, this skill possesses an inherent surface for indirect prompt injection. A malicious article could contain hidden instructions for the agent. However, the risk is categorized as low due to the skill's limited capabilities and the typical guardrails of the underlying LLM. - Ingestion points: Fetches article content from external URLs in
scripts/article_fetcher.py. - Boundary markers: No explicit delimiters are used to wrap fetched content in the agent's context.
- Capability inventory: Limited to network GET requests and writing to a local cache file.
- Sanitization: Employs basic regex-based HTML tag stripping in
scripts/techmeme_scraper.py.
Audit Metadata