news-aggregator

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external news sources and search engines, creating a vulnerability surface where adversarial content could influence the agent's behavior.
  • Ingestion points: External data enters the agent context via the results of google_news_bulk_articles, tavily_search, and exa_search calls as defined in SKILL.md.
  • Boundary markers: The instructions lack specific delimiters or warnings to the agent to disregard instructions embedded within the retrieved news content.
  • Capability inventory: The skill uses sandbase_call_tool to perform network-based searches.
  • Sanitization: There are no instructions for sanitizing or filtering the content retrieved from external sources before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:45 AM