World News API

• Outcome: Pass
• Latest audit: Jun 3, 2026, 4:47 PM
• Version:
  1.0.0

Overview

This skill is a straightforward World News API connector that performs disclosed read/search actions through OOMOL, with no evidence of hidden or destructive behavior.

Install this only if you are comfortable connecting an OOMOL account and World News API credential. User queries and API payloads will be sent through the OOMOL connector to retrieve news data; review payloads for sensitive search terms before running broad searches.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The description says to use this skill for ANY World News API request and whenever a task involves World News API, which is overly broad routing language. This can cause an agent to invoke the skill for ambiguous requests without first verifying user intent or whether a safer/native path is more appropriate, increasing the chance of unnecessary external calls and unintended data disclosure.

VirusTotal

64/64 vendors flagged this skill as clean.