Agent skill · Audited from source
coverage-tracker
skill · elvisun/newsjackMIT licenceAudited 21 Oct 2026 · source d9b73ba47e88
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit d9b73ba47e88 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 2 findings, 0 critical or high. What it does: Run a Google Alerts-style keyword coverage tracker. Uses news-search for recent keyword queries, lets the LLM dedupe and classify real features versus junk, stores decisions in SQLite, and alerts only on new real…
Cite
Cite this page
ModelsAtlas. “coverage-tracker (elvisun/newsjack)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/elvisun/coverage-tracker
Trust audit
Audit 0.4.1 · source read 21 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 2 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (2)
MEDIUMInventory / provenanceinv.symlink · plugins/newsjack/.mcp.json
plugins/newsjack/.mcp.json
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/newsjack/skills
plugins/newsjack/skills
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha d9b73ba47e88 · 21 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherelvisun GitHub userOwner of the repository this skill is read from
- Source folderelvisun/newsjack/skills/coverage-trackerThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdictd9b73ba47e88A new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Run a Google Alerts-style keyword coverage tracker. Uses news-search for recent keyword queries, lets the LLM dedupe and classify real features versus junk, stores decisions in SQLite, and alerts only on new real…
---
name: coverage-tracker
description: "Run a Google Alerts-style keyword coverage tracker. Uses news-search for recent keyword queries, lets the LLM dedupe and classify real features versus junk, stores decisions in SQLite, and alerts only on new real coverage."
when_to_use: "User wants to run coverage alerts, check new mentions, track press coverage, monitor brand/company keyword coverage, or execute a previously configured coverage tracker."
metadata:
category: Detect
---
# Coverage Tracker
Track whether configured keywords appeared in real coverage. Keep this simple: `news-search` collects dated article evidence, you dedupe and judge with the keyword's meaning snippet, and the CLI only stores config plus seen/alert state.
This is not `newsjack-detector`. Do not score newsjacking opportunities, generate angles, assess standing, or use monitor profiles.
## Runtime Mode
- **Full Mode:** Use this in Claude Code, Codex, OpenClaw, Hermes, or another capable agent harness with shell, filesystem, network, and local CLI access. Full Mode can read tracker config, check SQLite seen-state, record decisions, and suppress repeat alerts.
- **Limited Mode:** Use this in Claude.ai chat, ChatGPT chat, Claude Cowork, or any restricted runtime without shell/filesystem/CLI access. Do not attempt `curl`, `npm`, or on-demand CLI installation. Run a one-off manual coverage check from pasted/searchable evidence and disclose that no tracker config, SQLite state, or repeat suppression was used.
**Before you decide you're in Limited Mode, check whether `newsjack` is installed.** It ships as a prebuilt, bundled binary — you do **not** need Go, a compiler, or any build/install step to run it. Never look for a Go toolchain, and never declare the CLI "missing" or tell the user they need a "Go environment" without running this check first:
1. Run `newsjack --version`. If it prints a version, you're in Full Mode — use plain `newsjack ...` for every command.
2. If `newsjack` isn't on `PATH`, try the bundled location `~/.newsjack/bin/newsjack --version`. If that prints a version, use that full path in place of `newsjack` everywhere below.
3. Only if **both** fail (and you genuinely have no shell) are you in Limited Mode.
The bundled binary is almost always already installed — assume Full Mode and verify, don't assume it's missing.
## Workflow
In Limited Mode, skip the CLI state steps and:
1. Ask for the keyword, what it means, lookback window, and any exclusions if they are not already present.
2. Use pasted links first. If search tools are available, search the keyword plus a recency bound and keep dated, attributed article evidence when available.
3. Dedupe obvious repeats by URL/title/outlet/date.
4. Classify each item with the verdicts below.
5. Return a short inline report with new likely coverage, filtered counts, and a Limited Mode caveat that repeat suppression was unavailable.
In Full Mode, run the persistent workflow:
1. **Find the tracker.**
- If the user gave a slug, run `newsjack coverage status <slug>`.
- If working in a source checkout, prefer `bin/newsjack`.
- If no slug is given, ask which tracker to run unless local context makes it obvious.
- Read the returned `config_path`.
2. **Search each keyword.**
- Read the current date from the system (e.g. run `date`); do not recall it from memory. Compute `since_date` as that date minus `lookback_days` from the config, defaulting to `2`.
- For each keyword, call `news-search` with exactly:
```text
"keyword" after:YYYY-MM-DD
```
- If the keyword has aliases, search each alias the same way, but keep the original keyword entry attached.
- Keep dated, attributed article fields from `news-search`: `title`, `url`, `outlet`, `author`, `published_at`, and snippet/summary when available.
3. **Dedupe and check stored decisions before using the LLM.**
- Dedupe exact canonical URLs first, then obvious same-article duplicates by title/outlet/date.
- Create a minimal candidate JSON file only because the CLI helper consumes a file. Put it in a temporary location, or in a timestamped run folder if your harness normally keeps run artifacts:
```json
{
"items": [
{
"keyword": "profound",
"title": "Article title",
"url": "https://...",
"outlet": "Outlet",
"author": "Author or null",
"published_at": "2026-06-05T12:00:00Z",
"snippet": "Search snippet or summary"
}
]
}
```
- Run:
```bash
newsjack coverage check <slug> --input candidates.json
```
- Do not reclassify `known_items` unless the user explicitly asks for a fresh review. Use their `prior_decision` to count filtered/known results and suppress repeat alerts.
- Classify only `unknown_items`.
4. **LLM classify unknown items.**
- Use the keyword's `means` field as the authority for entity matching.
- Reject generic-word usage and wrong entities, especially for ambiguous keywords like `profound`.
- Do not alert from title/snippet keyword presence alone. When the snippet leaves the verdict unclear, read the article before deciding.
Use these verdicts:
- `real_feature`: the article is substantially about the intended entity/product/person. Alert.
- `substantive_mention`: meaningful paragraph-level mention, but not a feature. Save, normally no alert.
- `passing_mention`: brief mention only. Save, no alert.
- `wrong_entity`: the keyword refers to something else. Save, no alert.
- `junk`: SEO, scraper, duplicate landing page, job post, docs/help page, or non-news. Save, no alert.
- `uncertain`: insufficient evidence. Save, no alert.
5. **Record only newly classified unknown items.**
If there are no `unknown_items`, skip `coverage record` and report from the `coverage check` result.
If you classified new items, write the minimum `decisions.json` needed by the CLI:
```jsonExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit d9b73ba
git clone https://github.com/elvisun/newsjack git -C newsjack checkout d9b73ba47e88
The author documents no install command, so this uses the repository directly. Our verdict covers commit d9b73ba47e88 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
d9b73ba47e88
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/elvisun/coverage-tracker/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
elvisun/newsjack
Consolidate freshness-gated newsjack signals and route them by client standing before angle generation. Collapses any remaining same-story duplicates, decides strong/partial/none standing with a journalist-shape sanity…
elvisun/newsjack
Roast a pitch or press release with the eye of a veteran PR director. Honest, sharp, constructive — never cruel for its own sake.
elvisun/newsjack
Search current news for a topic, company, competitor, or hook and return dated, attributed articles. Uses the newsjack CLI and Medialyst REST API when available, tries direct Medialyst MCP if the CLI is missing, and…
elvisun/newsjack
Gate a pitch against one journalist at a time. Runs the pair through proven media-relations checks (last-10-bylines audit, 90-day topic sweep, beat-vs-angle-vs-one-off, the 5 forms of journalism, source-mirror,…
elvisun/newsjack
Generate headline candidates from a story's raw facts: news-style headlines, press-release headlines, and pitch subject lines. A pure generation skill — it finds the charge in the facts, then runs ten proven moves…
elvisun/newsjack
Build a researched, fit-checked journalist list for a specific PR campaign. Prefer Medialyst's asynchronous media-list research workflow when available, with explicit approval before credit spend; otherwise produce a…
Add this badge to your README
[](https://modelsatlas.com/skills/elvisun/coverage-tracker/)
<a href="https://modelsatlas.com/skills/elvisun/coverage-tracker/"><img src="https://modelsatlas.com/skills/elvisun/coverage-tracker/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about coverage-tracker
What does the coverage-tracker skill do?
Is coverage-tracker safe to install?
What can coverage-tracker access on my machine?
Which assistants does coverage-tracker work with?
How current is this page?
Sources
- github.com/elvisun/newsjack/tree/main/skills/coverage-tracker — the audited source at commit d9b73ba47e88 and every finding aboveObserved · 21 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the coverage-tracker skill do?
- Is coverage-tracker safe to install?
- What can coverage-tracker access on my machine?