hackernews
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (Hacker News API) which may contain user-generated content.
- Ingestion points: The skill uses
curlto fetch JSON data fromhacker-news.firebaseio.comin multiple sections (e.g., Get Story/Comment Details, User Profiles). - Capability inventory: The skill has the capability to execute shell commands (
curl,jq) and read their output into the agent's context. - Sanitization: No explicit sanitization or filtering of the fetched content is performed before it is presented to the agent.
- Boundary markers: The skill does not provide explicit boundary markers or instructions to the agent to disregard potential commands embedded within the external data.
Audit Metadata