public-relations
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes informational examples of using
curlto fetch news data from well-known and reputable services such as Google News, Hacker News (via the Algolia API), and Reddit. These workflows are consistent with the skill's purpose for monitoring industry trends. - [INDIRECT_PROMPT_INJECTION]: The skill's workflows involve the ingestion of external data from various web sources like RSS feeds and news aggregator APIs. Ingestion points: External content enters the agent's context through queries to Google News, Hacker News, and Reddit as described in
references/newsjacking.md. Boundary markers: There are no explicit instructions or delimiters provided to separate untrusted external content from the agent's internal logic. Capability inventory: The skill encourages the use of shell utilities (curl,jq,xmllint) and a browser tool to process the retrieved data. Sanitization: The examples do not include explicit sanitization or validation of the fetched content.
Audit Metadata