news-sentiment
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes a shell command to read the skill's configuration file (
config.json). This is a routine operation used to retrieve the NewsAPI key required for the skill's functionality.- [EXTERNAL_DOWNLOADS]: Fetches news content from NewsAPI's official endpoint (newsapi.org), which is a well-known and reputable service.- [DATA_EXPOSURE_AND_EXFILTRATION]: Accesses an API key stored in the skill's local directory. The key is used as intended to authenticate requests to the NewsAPI service.- [PROMPT_INJECTION]: The skill ingests and processes untrusted news headlines and descriptions from external sources. While this creates an indirect prompt injection surface, the data is restricted to sentiment scoring and text output, which does not grant the data influence over sensitive system operations.
Audit Metadata