public-relations
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external, third-party sources to identify newsjacking opportunities, creating an attack surface for indirect prompt injection.
- Ingestion points: Content is fetched from Google News RSS, Hacker News (Algolia API), and Reddit in
references/newsjacking.md. - Boundary markers: The skill does not provide delimiters or specific instructions to help the agent distinguish between news data and potential instructions embedded within that data.
- Capability inventory: The agent is equipped to read these sources using
curl, parse them withjqorxmllint, and generate new outreach pitches based on the content. - Sanitization: The instructions do not include steps to sanitize, filter, or validate the retrieved content before it is analyzed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill retrieves information from established and well-known technology services to support its news monitoring functionality.
- Evidence:
references/newsjacking.mdcontainscurlcommands targetingnews.google.com,hn.algolia.com, andreddit.com. - [COMMAND_EXECUTION]: The skill provides shell snippets for the agent to execute data retrieval and parsing tasks using standard utilities.
- Evidence:
references/newsjacking.mdincludes command-line pipelines usingcurl,jq, andxmllintto fetch and format news data.
Audit Metadata