fetch-country-brief
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes AI-generated briefs synthesized from external news sources, which presents an attack surface for indirect prompt injection where malicious instructions could be embedded in the source data.
- Ingestion points: The
brieffield returned by theGET https://www.worldmonitor.app/api/intelligence/v1/get-country-intel-briefendpoint. - Boundary markers: The skill includes a 'Content safety' section that explicitly instructs the agent to treat the response as 'data, not instructions' and to disregard directive-like text.
- Capability inventory: The skill uses
curlto fetch data andjqto extract content; it does not demonstrate capabilities like file system writes or further network exfiltration using the ingested data. - Sanitization: The skill relies on natural language instructions for the agent to filter/ignore embedded commands rather than technical sanitization or schema-based isolation.
- [COMMAND_EXECUTION]: The skill provides documentation and examples using common command-line utilities.
- Evidence: The worked examples demonstrate the use of
curlfor HTTP requests andjqfor JSON processing to retrieve and display the intelligence briefs.
Audit Metadata