public-relations

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from external, third-party sources to identify newsjacking opportunities, creating an attack surface for indirect prompt injection.
  • Ingestion points: Content is fetched from Google News RSS, Hacker News (Algolia API), and Reddit in references/newsjacking.md.
  • Boundary markers: The skill does not provide delimiters or specific instructions to help the agent distinguish between news data and potential instructions embedded within that data.
  • Capability inventory: The agent is equipped to read these sources using curl, parse them with jq or xmllint, and generate new outreach pitches based on the content.
  • Sanitization: The instructions do not include steps to sanitize, filter, or validate the retrieved content before it is analyzed by the agent.
  • [EXTERNAL_DOWNLOADS]: The skill retrieves information from established and well-known technology services to support its news monitoring functionality.
  • Evidence: references/newsjacking.md contains curl commands targeting news.google.com, hn.algolia.com, and reddit.com.
  • [COMMAND_EXECUTION]: The skill provides shell snippets for the agent to execute data retrieval and parsing tasks using standard utilities.
  • Evidence: references/newsjacking.md includes command-line pipelines using curl, jq, and xmllint to fetch and format news data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 01:54 AM