public-relations

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves data from well-known services to support PR workflows.\n- News Feeds: It uses curl to access public RSS and JSON data from Google News, Hacker News, and Reddit in references/newsjacking.md.\n- [COMMAND_EXECUTION]: The skill suggests shell commands for parsing news data.\n- Data Processing: Uses jq and xmllint to process retrieved content.\n- [PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection from fetched news content.\n- Ingestion points: references/newsjacking.md (via curl to external news feeds).\n- Boundary markers: There are no specific delimiters described for isolating external data.\n- Capability inventory: Use of curl, jq, xmllint, and dev-browser.\n- Sanitization: Fetched news headlines and descriptions are not sanitized before being processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 07:45 AM