camelcamelcamel-alerts
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The fetch_rss.py script performs network requests to download RSS data from CamelCamelCamel. This is the primary function of the skill.
- [COMMAND_EXECUTION]: The skill utilizes cron to schedule recurring shell commands that pipe data between Python and Bash scripts.
- [PROMPT_INJECTION]: The skill processes external RSS content which could contain indirect prompt injection instructions. Ingestion points: The RSS feed URL in scripts/fetch_rss.py. Boundary markers: None. Capability inventory: System command execution via cron and network access. Sanitization: No validation or escaping is applied to the feed content before it is processed into notifications.
Audit Metadata