skills/vm0-ai/vm0-skills/hackernews/Gen Agent Trust Hub

hackernews

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill uses curl to interact with hacker-news.firebaseio.com, which is a well-known service used by the official Hacker News API. These requests are limited to fetching publicly available JSON data.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external sources (story titles, comments, and user bio text) which could potentially contain prompt injection instructions.
  • Ingestion points: Hacker News API responses for items and user profiles, specifically the text, title, and about fields.
  • Boundary markers: None are provided to separate fetched content from the agent's instructions.
  • Capability inventory: The skill utilizes curl for network access and jq for data processing.
  • Sanitization: No sanitization or validation of the fetched text is performed before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:10 AM
Security Audit — agent-trust-hub — hackernews