public-relations

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from well-known news and community platforms to identify trending topics.
  • Evidence: references/newsjacking.md contains instructions to use curl for fetching RSS feeds and JSON data from Google News, Algolia (Hacker News), and Reddit.
  • [COMMAND_EXECUTION]: Shell commands are provided for the agent to automate news discovery and data parsing.
  • Evidence: references/newsjacking.md provides curl commands piped into jq and xmllint for extracting news items.
  • [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection by processing untrusted external news content.
  • Ingestion points: references/newsjacking.md (fetches news titles and descriptions from Google News, Hacker News, and Reddit).
  • Boundary markers: Absent (the fetched data is processed directly to generate pitches).
  • Capability inventory: Execution of shell commands (curl, jq, xmllint) and file system access (writing to .agents/media-list.md).
  • Sanitization: Not present (fetched text is processed as-is for summarization and angle generation).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 08:51 PM