bx-rss
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection through the parsing of external, untrusted RSS/Atom feed data.
- Ingestion points: Content is fetched from arbitrary external URLs using the
rss()BIF or thebx:feedcomponent withaction="read"inSKILL.md. - Boundary markers: No boundary markers or special guardrails are implemented to isolate external content or instruct the model to ignore potential embedded instructions.
- Capability inventory: The skill possesses capabilities to write data to local files (
fileWrite) and render output viawriteOutputor HTTP endpoints. - Sanitization: The raw text contents of the feed (such as titles, descriptions, and items) are handled and displayed directly without filtering or sanitization.
Audit Metadata