ai-news-research
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external web sources which could potentially contain malicious instructions intended to manipulate the agent's output.
- Ingestion points: In
SKILL.md, Step 2 usesweb_fetchto ingest data from third-party sites includinggithub.blog, Hacker News, and Reddit. - Boundary markers: The instructions do not explicitly implement boundary markers or delimiters to isolate fetched content from the agent's primary instructions.
- Capability inventory: The skill is capable of writing the processed content to the local file system (
docs/news/<month>.md). - Sanitization: There are no explicit instructions for the agent to sanitize or ignore embedded instructions within the fetched data.
Audit Metadata