public-relations

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides shell commands in references/newsjacking.md for installing system utilities (jq) and performing data retrieval via curl. These operations are consistent with the stated purpose of media monitoring and do not involve suspicious execution patterns.
  • [EXTERNAL_DOWNLOADS]: The skill automates data fetching from well-known and reputable services including Google News, Hacker News (via Algolia's API), and Reddit. These downloads are used to identify trending topics and do not involve executable code from untrusted sources.
  • [PROMPT_INJECTION]: The newsjacking workflow ingests untrusted content from external news feeds, presenting a surface for indirect prompt injection.
  • Ingestion points: Fetches content from Google News RSS, Hacker News API, and Reddit in references/newsjacking.md.
  • Boundary markers: No explicit delimiters or isolation instructions are provided to separate retrieved news content from the agent's reasoning process.
  • Capability inventory: The skill utilizes curl for network requests, dev-browser for research, and writes results to research files like .agents/media-list.md.
  • Sanitization: No explicit sanitization or filtering of the fetched headlines or descriptions is performed before the agent processes them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 07:31 PM