newsjack-detector
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted news signals from external sources (RSS feeds, X, and news searches) to generate PR reports and campaign prompts.
- Ingestion points: Data retrieved from
news_searchand various RSS feeds listed inreferences/rss-feeds.json(e.g., Techmeme, Google News). - Boundary markers: The skill does not define specific delimiters for untrusted content, though it passes data to filtering and origin-checking sub-skills.
- Capability inventory: The skill executes shell commands via the
newsjackCLI, writes JSON and Markdown artifacts to the local filesystem, and can send messages to Slack webhooks. - Sanitization: No explicit content sanitization or escaping is mentioned before news summaries are included in reports or sent to Slack.
- [COMMAND_EXECUTION]: The skill relies on a bundled CLI tool,
newsjack, to perform core functions including story clustering, filtering, and triage. - Evidence: Multiple shell command examples in
SKILL.md, such asnewsjack detector run,newsjack filter-apply, andnewsjack origin-apply. - [EXTERNAL_DOWNLOADS]: The skill retrieves news data and RSS feeds from various external domains.
- Evidence:
references/rss-feeds.jsoncontains numerous URLs for news sources like Google News, Techmeme, and official government press releases (FTC, SEC, GOV.UK). These are well-known and reputable services.
Audit Metadata