public-relations

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes informational examples of using curl to fetch news data from well-known and reputable services such as Google News, Hacker News (via the Algolia API), and Reddit. These workflows are consistent with the skill's purpose for monitoring industry trends.
  • [INDIRECT_PROMPT_INJECTION]: The skill's workflows involve the ingestion of external data from various web sources like RSS feeds and news aggregator APIs. Ingestion points: External content enters the agent's context through queries to Google News, Hacker News, and Reddit as described in references/newsjacking.md. Boundary markers: There are no explicit instructions or delimiters provided to separate untrusted external content from the agent's internal logic. Capability inventory: The skill encourages the use of shell utilities (curl, jq, xmllint) and a browser tool to process the retrieved data. Sanitization: The examples do not include explicit sanitization or validation of the fetched content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 01:33 AM