daily news briefing

• Outcome: Pass
• Latest audit: May 29, 2026, 8:23 PM
• Version:
  1.0.0

Overview

This is a coherent news-briefing skill with disclosed web research guidance and an optional local template renderer.

Before installing, be comfortable with the agent using web browsing to gather current news. If you use the optional renderer, choose a dedicated output folder and review generated Markdown or HTML before publishing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill instructs the agent to invoke a local script that writes files to an output directory, which is a code-capable behavior despite no declared permissions. This creates an accountability and sandboxing gap: users and reviewers may treat the skill as purely editorial while it can perform filesystem actions, increasing the chance of unintended file creation or misuse in broader agent environments.

VirusTotal

66/66 vendors flagged this skill as clean.