federal-register-doc-fetch

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the tiangong-ai CLI tool to perform data discovery and retrieval. These operations are restricted to the federal-register.documents capability and follow a structured request/response flow using JSON envelopes.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes metadata retrieved from FederalRegister.gov, which represents an external data ingestion surface.
  • Ingestion points: Data enters the agent context via the output of the tiangong-ai data run command.
  • Boundary markers: The SKILL.md file contains a dedicated 'Result boundaries' section that instructs the agent on how to handle partial, truncated, or blocked results, and warns against treating metadata as legal proof.
  • Capability inventory: The skill is limited to shell execution of the tiangong-ai CLI for data retrieval; no file-write or arbitrary network capabilities are present in the provided files.
  • Sanitization: While no explicit code-based sanitization is shown, the skill provides clear instructional guardrails for the agent to validate claims against official editions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 04:42 AM