{"data":{"skill":{"slug":"sickn33-daily-news-report","name":"daily-news-report","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/daily-news-report","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"df17aca5-7de3-4d25-a023-c4e624c8a63d","skill_id":"661f8b9f-801f-4762-bc1e-bf72b2f9d6ab","version":5,"content_hash":"v3:f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526:358060bc4770a041009c928bc068eddcd429e337a59b6caf7fc81e1653a598d0:78da3c58a9b60871325b0b3e45e4c453ee570eab40e3cb29f4ff4383d4da4306:736b696c6c732f7369636b6e33332f6461696c792d6e6577732d7265706f7274:360bdb700f5958a381a5c80ebe9eac30","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"All 27 external-command detections are Markdown fences or inline code, not executable shell syntax. The hardcoded URLs are declared public news sources, and cache checks are normal deduplication. However, scraped or raw web content can reach agents without explicit prompt-injection isolation.","remediation":[{"issue":"Fetched pages can provide untrusted instructions to agents.","severity":"high","suggestion":"Treat page text as data and ignore embedded instructions. Allow only extraction into the declared fields before report generation."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":50,"line_start":15},{"file":"SKILL.md","line_end":58,"line_start":50},{"file":"SKILL.md","line_end":59,"line_start":58},{"file":"SKILL.md","line_end":65,"line_start":59},{"file":"SKILL.md","line_end":72,"line_start":65},{"file":"SKILL.md","line_end":78,"line_start":72},{"file":"SKILL.md","line_end":93,"line_start":78},{"file":"SKILL.md","line_end":99,"line_start":93},{"file":"SKILL.md","line_end":126,"line_start":99},{"file":"SKILL.md","line_end":132,"line_start":126},{"file":"SKILL.md","line_end":147,"line_start":132},{"file":"SKILL.md","line_end":151,"line_start":147},{"file":"SKILL.md","line_end":166,"line_start":151},{"file":"SKILL.md","line_end":172,"line_start":166},{"file":"SKILL.md","line_end":184,"line_start":172},{"file":"SKILL.md","line_end":188,"line_start":184},{"file":"SKILL.md","line_end":199,"line_start":188},{"file":"SKILL.md","line_end":203,"line_start":199},{"file":"SKILL.md","line_end":210,"line_start":203},{"file":"SKILL.md","line_end":218,"line_start":210},{"file":"SKILL.md","line_end":254,"line_start":218},{"file":"SKILL.md","line_end":258,"line_start":254},{"file":"SKILL.md","line_end":278,"line_start":258},{"file":"SKILL.md","line_end":282,"line_start":278},{"file":"SKILL.md","line_end":300,"line_start":282},{"file":"SKILL.md","line_end":300,"line_start":300},{"file":"SKILL.md","line_end":346,"line_start":312}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":103,"line_start":103},{"file":"SKILL.md","line_end":106,"line_start":106},{"file":"SKILL.md","line_end":228,"line_start":228},{"file":"SKILL.md","line_end":229,"line_start":229},{"file":"SKILL.md","line_end":265,"line_start":265},{"file":"SKILL.md","line_end":266,"line_start":266},{"file":"sources.json","line_end":12,"line_start":12},{"file":"sources.json","line_end":22,"line_start":22},{"file":"sources.json","line_end":34,"line_start":34},{"file":"sources.json","line_end":44,"line_start":44},{"file":"sources.json","line_end":60,"line_start":60},{"file":"sources.json","line_end":70,"line_start":70},{"file":"sources.json","line_end":82,"line_start":82},{"file":"sources.json","line_end":92,"line_start":92},{"file":"sources.json","line_end":108,"line_start":108},{"file":"sources.json","line_end":119,"line_start":119},{"file":"sources.json","line_end":136,"line_start":136},{"file":"sources.json","line_end":143,"line_start":143},{"file":"sources.json","line_end":150,"line_start":150},{"file":"sources.json","line_end":157,"line_start":157}]}],"critical_findings":[],"high_findings":[{"title":"Indirect Prompt Injection Exposure","locations":[{"file":"SKILL.md","line_end":184,"line_start":168},{"file":"SKILL.md","line_end":339,"line_start":332}],"confidence":0.9,"description":"The workflow parses untrusted pages and may return raw content after extraction failures. Embedded instructions could influence agents or report generation.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"Browser snapshots and raw fetched content enter agent processing, while the workflow provides no instruction to reject commands embedded in source pages."}],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":585,"audit_model":"codex","audited_at":"2026-07-23T22:06:57.274+00:00","created_at":"2026-07-26T08:21:05.680963+00:00","static_findings":[{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":50,"severity":"medium","line_start":15},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":58,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `sources.json` | Source configuration, priorities, scrape methods |","category":"external_commands","line_end":59,"severity":"medium","line_start":58},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `cache.json` | Cached data, historical stats, deduplication fingerprints |","category":"external_commands","line_end":65,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":72,"severity":"medium","line_start":65},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":78,"severity":"medium","line_start":72},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":93,"severity":"medium","line_start":78},{"id":"external_commands:SKILL.md:93:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":99,"severity":"medium","line_start":93},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":126,"severity":"medium","line_start":99},{"id":"external_commands:SKILL.md:126:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":132,"severity":"medium","line_start":126},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":147,"severity":"medium","line_start":132},{"id":"external_commands:SKILL.md:147:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":151,"severity":"medium","line_start":147},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":166,"severity":"medium","line_start":151},{"id":"external_commands:SKILL.md:166:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":172,"severity":"medium","line_start":166},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":184,"severity":"medium","line_start":172},{"id":"external_commands:SKILL.md:184:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":188,"severity":"medium","line_start":184},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":199,"severity":"medium","line_start":188},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":203,"severity":"medium","line_start":199},{"id":"external_commands:SKILL.md:203:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":210,"severity":"medium","line_start":203},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":218,"severity":"medium","line_start":210},{"id":"external_commands:SKILL.md:218:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":254,"severity":"medium","line_start":218},{"id":"external_commands:SKILL.md:254:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":258,"severity":"medium","line_start":254},{"id":"external_commands:SKILL.md:258:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":278,"severity":"medium","line_start":258},{"id":"external_commands:SKILL.md:278:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":282,"severity":"medium","line_start":278},{"id":"external_commands:SKILL.md:282:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":300,"severity":"medium","line_start":282},{"id":"external_commands:SKILL.md:300:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Keywords**: `keyword1` `keyword2` `keyword3`","category":"external_commands","line_end":300,"severity":"medium","line_start":300},{"id":"external_commands:SKILL.md:312:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":346,"severity":"medium","line_start":312},{"id":"network:SKILL.md:103:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"url: https://news.ycombinator.com","category":"network","line_end":103,"severity":"low","line_start":103},{"id":"network:SKILL.md:106:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"url: https://huggingface.co/papers","category":"network","line_end":106,"severity":"low","line_start":106},{"id":"network:SKILL.md:228:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- https://news.ycombinator.com (Extract Top 10)","category":"network","line_end":228,"severity":"low","line_start":228},{"id":"network:SKILL.md:229:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- https://huggingface.co/papers (Extract top voted papers)","category":"network","line_end":229,"severity":"low","line_start":229},{"id":"network:SKILL.md:265:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- https://news.ycombinator.com","category":"network","line_end":265,"severity":"low","line_start":265},{"id":"network:SKILL.md:266:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- https://huggingface.co/papers","category":"network","line_end":266,"severity":"low","line_start":266},{"id":"blocker:SKILL.md:155:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Check cache.json to avoid history duplicates","category":"blocker","line_end":155,"severity":"low","line_start":155},{"id":"blocker:SKILL.md:320:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"5.  **Cache Reuse**: Avoid re-scraping the same content.","category":"blocker","line_end":320,"severity":"low","line_start":320},{"id":"network:sources.json:12:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://news.ycombinator.com\",","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"network:sources.json:22:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://huggingface.co/papers\",","category":"network","line_end":22,"severity":"low","line_start":22},{"id":"network:sources.json:34:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://www.oneusefulthing.org\",","category":"network","line_end":34,"severity":"low","line_start":34},{"id":"network:sources.json:44:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://paulgraham.com/articles.html\",","category":"network","line_end":44,"severity":"low","line_start":44},{"id":"network:sources.json:60:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://jamesclear.com/3-2-1\",","category":"network","line_end":60,"severity":"low","line_start":60},{"id":"network:sources.json:70:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://fs.blog/brain-food\",","category":"network","line_end":70,"severity":"low","line_start":70},{"id":"network:sources.json:82:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://hackernoon.com/c/product-management\",","category":"network","line_end":82,"severity":"low","line_start":82},{"id":"network:sources.json:92:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://scotthyoung.com/blog/articles\",","category":"network","line_end":92,"severity":"low","line_start":92},{"id":"network:sources.json:108:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://www.producthunt.com\",","category":"network","line_end":108,"severity":"low","line_start":108},{"id":"network:sources.json:119:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://www.latent.space\",","category":"network","line_end":119,"severity":"low","line_start":119},{"id":"network:sources.json:136:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://tldr.tech/ai\",","category":"network","line_end":136,"severity":"low","line_start":136},{"id":"network:sources.json:143:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://bensbites.com/archive\",","category":"network","line_end":143,"severity":"low","line_start":143},{"id":"network:sources.json:150:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://interconnects.ai\",","category":"network","line_end":150,"severity":"low","line_start":150},{"id":"network:sources.json:157:hardcoded-url","file":"sources.json","pattern":"Hardcoded URL","snippet":"\"url\": \"https://rss.beehiiv.com\",","category":"network","line_end":157,"severity":"low","line_start":157}],"finding_verdicts":[{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","reason":"The matched backticks open the Markdown architecture diagram. They do not contain Ruby execution or a shell command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"The matched backticks close a Markdown code block. No command execution syntax or executable code is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The backticks format the sources.json filename in a Markdown table. They are not Ruby or shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The backticks format the cache.json filename in a Markdown table. They are not Ruby or shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML example describing initialization steps. It is documentation, not an executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML example. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML workflow example. It does not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:93:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML workflow example. It is inert Markdown formatting.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML task schema. The block documents data fields and does not execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:126:ruby-shell-backtick-execution","reason":"The token closes the fenced YAML task schema. No shell interpolation or executable Ruby exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML monitoring example. It is documentation without command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:147:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML monitoring example. It is inert Markdown syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML filtering example. It describes scoring and deduplication without invoking commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:166:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML filtering example. No executable shell syntax is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML browser workflow. Tool names are documented as structured steps, not shell commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:184:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML browser workflow. It has no command execution semantics.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML output description. It documents a report path and format without executing commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML output description. It is Markdown formatting only.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:203:ruby-shell-backtick-execution","reason":"The token starts a fenced YAML cache-update description. It lists data fields and does not execute a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","reason":"The token closes a fenced YAML cache-update description. No Ruby or shell code is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:218:ruby-shell-backtick-execution","reason":"The token starts a fenced subagent call example. The content is a structured prompt, not a locally executed command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:254:ruby-shell-backtick-execution","reason":"The token closes a fenced subagent call example. It is inert Markdown syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:258:ruby-shell-backtick-execution","reason":"The token starts a fenced worker task example. It describes structured input and contains no shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:278:ruby-shell-backtick-execution","reason":"The token closes a fenced worker task example. It does not execute Ruby or shell code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:282:ruby-shell-backtick-execution","reason":"The token starts a fenced Markdown report template. Its contents are an output example, not executable code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:300:ruby-shell-backtick-execution","reason":"The backticks format placeholder keywords in a Markdown output template. They are not command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:312:ruby-shell-backtick-execution","reason":"The token closes the fenced Markdown report template. No executable command is present.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:103:hardcoded-url","reason":"The URL identifies Hacker News as a declared content source. The workflow reads public articles and shows no credential or local-data transmission.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:106:hardcoded-url","reason":"The URL identifies Hugging Face Papers as a declared content source. The workflow reads public content and shows no data exfiltration.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:228:hardcoded-url","reason":"The Hacker News URL appears in a documented scraping task. It is relevant to the skill and carries no secrets or local data.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:229:hardcoded-url","reason":"The Hugging Face URL appears in a documented scraping task. It is relevant to the skill and carries no secrets or local data.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:265:hardcoded-url","reason":"The Hacker News URL is structured input for the worker example. It is a public content source, not an exfiltration endpoint.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:266:hardcoded-url","reason":"The Hugging Face URL is structured input for the worker example. It is a public content source, not an exfiltration endpoint.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:155:system-reconnaissance","reason":"Reading the skill-owned cache.json file prevents duplicate articles. It does not inventory the host system or collect system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:320:system-reconnaissance","reason":"Cache reuse is a stated deduplication principle. It does not perform system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"network:sources.json:12:hardcoded-url","reason":"This configuration entry declares Hacker News as an enabled public source. It contains no credentials, uploads, or exfiltration behavior.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:22:hardcoded-url","reason":"This configuration entry declares Hugging Face Papers as an enabled public source. It contains no credentials, uploads, or exfiltration behavior.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:34:hardcoded-url","reason":"This configuration entry declares One Useful Thing as an enabled public source. It contains no credential or local-data transmission.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:44:hardcoded-url","reason":"This configuration entry declares Paul Graham Essays as an enabled public source. It contains no credential or local-data transmission.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:60:hardcoded-url","reason":"This configuration entry declares the James Clear newsletter as an enabled public source. It contains no credential or local-data transmission.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:70:hardcoded-url","reason":"This configuration entry declares Farnam Street as an enabled public source. It contains no credential or local-data transmission.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:82:hardcoded-url","reason":"This configuration entry declares HackerNoon product content as an enabled public source. It contains no credential or local-data transmission.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:92:hardcoded-url","reason":"This configuration entry declares Scott Young articles as an enabled public source. It contains no credential or local-data transmission.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:108:hardcoded-url","reason":"This configuration entry declares Product Hunt as a browser-rendered public source. It contains no credentials, uploads, or exfiltration behavior.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:119:hardcoded-url","reason":"This configuration entry declares Latent Space as a browser-rendered public source. It contains no credentials, uploads, or exfiltration behavior.","verdict":"false_positive","confidence":0.97},{"id":"network:sources.json:136:hardcoded-url","reason":"The TLDR AI URL is stored under the disabled source list. The configuration does not direct the workflow to request it.","verdict":"false_positive","confidence":0.99},{"id":"network:sources.json:143:hardcoded-url","reason":"The Ben's Bites URL is stored under the disabled source list. The configuration does not direct the workflow to request it.","verdict":"false_positive","confidence":0.99},{"id":"network:sources.json:150:hardcoded-url","reason":"The Interconnects AI URL is stored under the disabled source list. The configuration does not direct the workflow to request it.","verdict":"false_positive","confidence":0.99},{"id":"network:sources.json:157:hardcoded-url","reason":"The Beehiiv RSS URL is stored under the disabled source list. The configuration does not direct the workflow to request it.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[{"title":"Indirect Prompt Injection Exposure","severity":"high","locations":[{"file":"SKILL.md","line_end":184,"line_start":168},{"file":"SKILL.md","line_end":339,"line_start":332}],"confidence":0.9,"description":"The workflow parses untrusted pages and may return raw content after extraction failures. Embedded instructions could influence agents or report generation.","confidence_reasoning":"Browser snapshots and raw fetched content enter agent processing, while the workflow provides no instruction to reject commands embedded in source pages."}],"subject_marketplace_commit_sha":"f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526","subject_content_hash":"358060bc4770a041009c928bc068eddcd429e337a59b6caf7fc81e1653a598d0","subject_tree_hash":"78da3c58a9b60871325b0b3e45e4c453ee570eab40e3cb29f4ff4383d4da4306","subject_plugin_path":"skills/sickn33/daily-news-report","audit_payload_hash":"360bdb700f5958a381a5c80ebe9eac30","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526","contentHash":"358060bc4770a041009c928bc068eddcd429e337a59b6caf7fc81e1653a598d0","treeHash":"78da3c58a9b60871325b0b3e45e4c453ee570eab40e3cb29f4ff4383d4da4306","pluginPath":"skills/sickn33/daily-news-report","auditPayloadHash":"360bdb700f5958a381a5c80ebe9eac30"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-daily-news-report/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}