rss-feeds

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements feed parsing (RSS 2.0, RSS 1.0, Atom, JSON Feed) using only standard library modules like urllib, xml.etree.ElementTree, and json.
  • [SAFE]: The network operations are limited to fetching content from user-provided URLs using a specific User-Agent (hermes-agent/1.0).
  • [SAFE]: The feed discovery mechanism correctly identifies <link rel="alternate"> tags and common feed paths without any dynamic execution or persistence vectors.
  • [SAFE]: The script uses proper HTML stripping and date normalization techniques, avoiding common pitfalls with untrusted XML/HTML input by using the standard library's html.unescape and xml.etree.ElementTree (which is generally resistant to basic XXE if not explicitly configured with dangerous DTD processing, though not an issue here).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 09:25 PM
Security Audit — agent-trust-hub — rss-feeds