news-pulse
Warn
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script (
xueqiu_scraper.py) using shell commands. It interpolates user-supplied data such as company names and stock codes directly into the command line (e.g.,python3 ~/ai-berkshire/tools/xueqiu_scraper.py --user-id 1247347556 --keywords {公司名},{股票代码} --output /tmp/dyp-{公司名}.md). Without rigorous validation or sanitization, this pattern is susceptible to command and argument injection attacks. - [EXTERNAL_DOWNLOADS]: The skill uses
WebSearchandWebFetchtools to retrieve content from arbitrary external websites and regulatory platforms (e.g., SEC, HKEX) for processing by its sub-agents. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) as it ingests untrusted data from various external news sources and social media (Xueqiu, Reddit, X). The instructions lack explicit boundary markers or sanitization steps to prevent malicious instructions embedded in the fetched content from influencing the sub-agents' behavior or the final report generation.
- [COMMAND_EXECUTION]: The skill's instructions require writing reports to a local directory (
reports/{公司名}/) using filenames also derived from user input, which presents a risk of path traversal if the company name contains characters like../.
Audit Metadata