daily-briefing
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate data aggregation from well-known news organizations and official government portals (e.g., WSJ, Bloomberg, and the South Korean government's Korea.kr).
- [SAFE]: File system interactions are limited to standard configuration management (
.moai/config.json) and localized reporting directories (.moai/briefings/), consistent with expected agent behavior. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing external web content. However, the risk is minimized by targeting established, well-known service domains for information retrieval.
- Ingestion points: External news URLs and government statistics bureaus.
- Boundary markers: Absent; the instructions do not explicitly mandate the use of delimiters for retrieved text.
- Capability inventory: File-write access to local briefing directories.
- Sanitization: Absent; the skill processes headlines and summaries directly from the source.
Audit Metadata