news-aggregator
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external news sources and search engines, creating a vulnerability surface where adversarial content could influence the agent's behavior.
- Ingestion points: External data enters the agent context via the results of
google_news_bulk_articles,tavily_search, andexa_searchcalls as defined inSKILL.md. - Boundary markers: The instructions lack specific delimiters or warnings to the agent to disregard instructions embedded within the retrieved news content.
- Capability inventory: The skill uses
sandbase_call_toolto perform network-based searches. - Sanitization: There are no instructions for sanitizing or filtering the content retrieved from external sources before processing.
Audit Metadata