public-relations
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data from well-known news and community platforms to identify trending topics.
- Evidence:
references/newsjacking.mdcontains instructions to usecurlfor fetching RSS feeds and JSON data from Google News, Algolia (Hacker News), and Reddit. - [COMMAND_EXECUTION]: Shell commands are provided for the agent to automate news discovery and data parsing.
- Evidence:
references/newsjacking.mdprovidescurlcommands piped intojqandxmllintfor extracting news items. - [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection by processing untrusted external news content.
- Ingestion points:
references/newsjacking.md(fetches news titles and descriptions from Google News, Hacker News, and Reddit). - Boundary markers: Absent (the fetched data is processed directly to generate pitches).
- Capability inventory: Execution of shell commands (
curl,jq,xmllint) and file system access (writing to.agents/media-list.md). - Sanitization: Not present (fetched text is processed as-is for summarization and angle generation).
Audit Metadata