public-relations
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands in
references/newsjacking.mdfor installing system utilities (jq) and performing data retrieval viacurl. These operations are consistent with the stated purpose of media monitoring and do not involve suspicious execution patterns. - [EXTERNAL_DOWNLOADS]: The skill automates data fetching from well-known and reputable services including Google News, Hacker News (via Algolia's API), and Reddit. These downloads are used to identify trending topics and do not involve executable code from untrusted sources.
- [PROMPT_INJECTION]: The newsjacking workflow ingests untrusted content from external news feeds, presenting a surface for indirect prompt injection.
- Ingestion points: Fetches content from Google News RSS, Hacker News API, and Reddit in
references/newsjacking.md. - Boundary markers: No explicit delimiters or isolation instructions are provided to separate retrieved news content from the agent's reasoning process.
- Capability inventory: The skill utilizes
curlfor network requests,dev-browserfor research, and writes results to research files like.agents/media-list.md. - Sanitization: No explicit sanitization or filtering of the fetched headlines or descriptions is performed before the agent processes them.
Audit Metadata