public-relations
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves data from well-known services to support PR workflows.\n- News Feeds: It uses
curlto access public RSS and JSON data from Google News, Hacker News, and Reddit inreferences/newsjacking.md.\n- [COMMAND_EXECUTION]: The skill suggests shell commands for parsing news data.\n- Data Processing: Usesjqandxmllintto process retrieved content.\n- [PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection from fetched news content.\n- Ingestion points:references/newsjacking.md(viacurlto external news feeds).\n- Boundary markers: There are no specific delimiters described for isolating external data.\n- Capability inventory: Use ofcurl,jq,xmllint, anddev-browser.\n- Sanitization: Fetched news headlines and descriptions are not sanitized before being processed by the agent.
Audit Metadata