public-relations

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell command examples for the agent to monitor news trends from public sources.
  • Evidence: references/newsjacking.md provides curl commands to fetch data from Google News RSS, Hacker News (via Algolia API), and Reddit.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing a standard data-processing utility to facilitate news monitoring.
  • Evidence: references/newsjacking.md suggests using brew install jq to handle JSON data from news APIs.
  • [PROMPT_INJECTION]: The skill's workflow involves ingesting and analyzing untrusted external content from news articles and social media, which is an inherent surface for indirect prompt injection.
  • Ingestion points: News articles and social media posts retrieved via curl and dev-browser in the newsjacking and pitching workflows.
  • Boundary markers: The instructions do not specify explicit delimiters or warnings for the agent when processing this external content.
  • Capability inventory: The agent has access to curl and the dev-browser tool for research and data retrieval.
  • Sanitization: No specific sanitization or filtering logic is provided for the external content before it is analyzed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 07:02 PM