blog-watcher
Warn
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
blogwatchertool usinggo install github.com/Hyaxia/blogwatcher/cmd/blogwatcher@latest. This source is not part of the trusted vendors list and represents an unverifiable external dependency. - [COMMAND_EXECUTION]: The skill's primary functionality is to execute various subcommands of the
blogwatcherCLI tool. Additionally, the providedtest.jsscript usesexecSyncto invoke the CLI tool directly from the environment. - [PROMPT_INJECTION]: The skill is designed to ingest and process data from arbitrary RSS/Atom feeds. This is an indirect prompt injection surface where untrusted external content could contain instructions meant to manipulate the agent's behavior.
- Ingestion points: RSS/Atom feed content processed by
blogwatcher scanandblogwatcher articles. - Boundary markers: None detected in the provided instructions; feed content is likely passed directly to the agent context.
- Capability inventory: The agent can execute CLI commands and potentially summarize/analyze content using other skills.
- Sanitization: No explicit sanitization or validation of the feed content is mentioned before it is presented to the agent.
Audit Metadata