blogwatcher
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that use
curlto download pre-compiled binaries from the author's official GitHub releases page (https://github.com/JulienTant/blogwatcher-cli/releases). This is a standard installation procedure for CLI tools and aligns with the skill's documented purpose. - [COMMAND_EXECUTION]: The skill documents numerous commands for the
blogwatcher-clitool. These commands are executed by the agent to manage blog feeds, scan for updates, and mark articles as read/unread. The commands interact with a local SQLite database and external RSS/Atom feeds. - [INDIRECT_PROMPT_INJECTION]: The skill has the surface area for indirect prompt injection because it ingests data from external RSS/Atom feeds and HTML content via scraping. While the skill does not explicitly process this data into LLM instructions, an attacker could potentially embed malicious prompts in a feed that the agent might interpret if it processes the article summaries or content directly. However, standard agent guardrails typically handle such untrusted content.
- Ingestion points: RSS/Atom feeds and HTML scraping targets defined by the user.
- Boundary markers: Not explicitly present in the provided skill instructions.
- Capability inventory: Executes the
blogwatcher-clitool which performs network requests (feed scanning) and file writes (local SQLite database updates). - Sanitization: Relies on the underlying
blogwatcher-clitool's handling of XML/HTML content. - [NO_CODE]: The skill consists primarily of documentation and instructions for using an existing CLI tool; it does not contain its own executable scripts or complex logic.
Audit Metadata