public-relations
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell command examples for the agent to monitor news trends from public sources.
- Evidence:
references/newsjacking.mdprovidescurlcommands to fetch data from Google News RSS, Hacker News (via Algolia API), and Reddit. - [EXTERNAL_DOWNLOADS]: The skill recommends installing a standard data-processing utility to facilitate news monitoring.
- Evidence:
references/newsjacking.mdsuggests usingbrew install jqto handle JSON data from news APIs. - [PROMPT_INJECTION]: The skill's workflow involves ingesting and analyzing untrusted external content from news articles and social media, which is an inherent surface for indirect prompt injection.
- Ingestion points: News articles and social media posts retrieved via
curlanddev-browserin the newsjacking and pitching workflows. - Boundary markers: The instructions do not specify explicit delimiters or warnings for the agent when processing this external content.
- Capability inventory: The agent has access to
curland thedev-browsertool for research and data retrieval. - Sanitization: No specific sanitization or filtering logic is provided for the external content before it is analyzed by the agent.
Audit Metadata