public-relations
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external news platforms and podcast metadata, which could be used to influence agent behavior.
- Ingestion points: Fetches content from Google News, Hacker News, and Reddit in
references/newsjacking.md, and RSS feeds inreferences/podcast-guest-prep.md. - Boundary markers: The instructions do not define clear delimiters or instruct the agent to ignore instructions within the retrieved data.
- Capability inventory: The skill utilizes
curl,xmllint,jq, anddev-browserto interact with this data. - Sanitization: No sanitization or validation logic is applied to the external content before processing.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to retrieve content from well-known news and information services.
- Evidence:
references/newsjacking.mdincludescurlrequests tonews.google.com,hn.algolia.com, andreddit.com. - Evidence:
references/podcast-guest-prep.mduses RSS feeds and web scraping to gather show information. - [COMMAND_EXECUTION]: The skill uses shell commands for data retrieval and transformation.
- Evidence:
references/newsjacking.mdprovides templates for usingcurlpiped intoxmllintandjqfor parsing RSS and JSON data.
Audit Metadata