Agent skill · Audited from source

coverage-tracker

skill · elvisun/newsjackMIT licenceAudited 21 Oct 2026 · source d9b73ba47e88

★ 1,634pushed 1 day ago
!CAUTIONGrade B · 89/100 · 2 findings · d9b73ba
1,634repo stars · whole elvisun/newsjack

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit d9b73ba47e88 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 2 findings, 0 critical or high. What it does: Run a Google Alerts-style keyword coverage tracker. Uses news-search for recent keyword queries, lets the LLM dedupe and classify real features versus junk, stores decisions in SQLite, and alerts only on new real…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “coverage-tracker (elvisun/newsjack)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/elvisun/coverage-tracker

Trust audit

Audit 0.4.1 · source read 21 Oct 2026

Trust score89/100!CAUTION B
0 critical0 high2 medium0 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityWARN2
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (2)

Audit 0.4.1 · source sha d9b73ba47e88 · 21 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherelvisun GitHub userOwner of the repository this skill is read from
  • Source folderelvisun/newsjack/skills/coverage-trackerThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdictd9b73ba47e88A new audit runs when the source changes
  • Repository statusNot archivedLast push 1 day ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Run a Google Alerts-style keyword coverage tracker. Uses news-search for recent keyword queries, lets the LLM dedupe and classify real features versus junk, stores decisions in SQLite, and alerts only on new real…

---
name: coverage-tracker
description: "Run a Google Alerts-style keyword coverage tracker. Uses news-search for recent keyword queries, lets the LLM dedupe and classify real features versus junk, stores decisions in SQLite, and alerts only on new real coverage."
when_to_use: "User wants to run coverage alerts, check new mentions, track press coverage, monitor brand/company keyword coverage, or execute a previously configured coverage tracker."
metadata:
  category: Detect
---

# Coverage Tracker

Track whether configured keywords appeared in real coverage. Keep this simple: `news-search` collects dated article evidence, you dedupe and judge with the keyword's meaning snippet, and the CLI only stores config plus seen/alert state.

This is not `newsjack-detector`. Do not score newsjacking opportunities, generate angles, assess standing, or use monitor profiles.

## Runtime Mode

- **Full Mode:** Use this in Claude Code, Codex, OpenClaw, Hermes, or another capable agent harness with shell, filesystem, network, and local CLI access. Full Mode can read tracker config, check SQLite seen-state, record decisions, and suppress repeat alerts.
- **Limited Mode:** Use this in Claude.ai chat, ChatGPT chat, Claude Cowork, or any restricted runtime without shell/filesystem/CLI access. Do not attempt `curl`, `npm`, or on-demand CLI installation. Run a one-off manual coverage check from pasted/searchable evidence and disclose that no tracker config, SQLite state, or repeat suppression was used.

**Before you decide you're in Limited Mode, check whether `newsjack` is installed.** It ships as a prebuilt, bundled binary — you do **not** need Go, a compiler, or any build/install step to run it. Never look for a Go toolchain, and never declare the CLI "missing" or tell the user they need a "Go environment" without running this check first:

1. Run `newsjack --version`. If it prints a version, you're in Full Mode — use plain `newsjack ...` for every command.
2. If `newsjack` isn't on `PATH`, try the bundled location `~/.newsjack/bin/newsjack --version`. If that prints a version, use that full path in place of `newsjack` everywhere below.
3. Only if **both** fail (and you genuinely have no shell) are you in Limited Mode.

The bundled binary is almost always already installed — assume Full Mode and verify, don't assume it's missing.

## Workflow

In Limited Mode, skip the CLI state steps and:

1. Ask for the keyword, what it means, lookback window, and any exclusions if they are not already present.
2. Use pasted links first. If search tools are available, search the keyword plus a recency bound and keep dated, attributed article evidence when available.
3. Dedupe obvious repeats by URL/title/outlet/date.
4. Classify each item with the verdicts below.
5. Return a short inline report with new likely coverage, filtered counts, and a Limited Mode caveat that repeat suppression was unavailable.

In Full Mode, run the persistent workflow:

1. **Find the tracker.**
   - If the user gave a slug, run `newsjack coverage status <slug>`.
   - If working in a source checkout, prefer `bin/newsjack`.
   - If no slug is given, ask which tracker to run unless local context makes it obvious.
   - Read the returned `config_path`.

2. **Search each keyword.**
   - Read the current date from the system (e.g. run `date`); do not recall it from memory. Compute `since_date` as that date minus `lookback_days` from the config, defaulting to `2`.
   - For each keyword, call `news-search` with exactly:

     ```text
     "keyword" after:YYYY-MM-DD
     ```

   - If the keyword has aliases, search each alias the same way, but keep the original keyword entry attached.
   - Keep dated, attributed article fields from `news-search`: `title`, `url`, `outlet`, `author`, `published_at`, and snippet/summary when available.

3. **Dedupe and check stored decisions before using the LLM.**
   - Dedupe exact canonical URLs first, then obvious same-article duplicates by title/outlet/date.
   - Create a minimal candidate JSON file only because the CLI helper consumes a file. Put it in a temporary location, or in a timestamped run folder if your harness normally keeps run artifacts:

     ```json
     {
       "items": [
         {
           "keyword": "profound",
           "title": "Article title",
           "url": "https://...",
           "outlet": "Outlet",
           "author": "Author or null",
           "published_at": "2026-06-05T12:00:00Z",
           "snippet": "Search snippet or summary"
         }
       ]
     }
     ```

   - Run:

     ```bash
     newsjack coverage check <slug> --input candidates.json
     ```

   - Do not reclassify `known_items` unless the user explicitly asks for a fresh review. Use their `prior_decision` to count filtered/known results and suppress repeat alerts.
   - Classify only `unknown_items`.

4. **LLM classify unknown items.**
   - Use the keyword's `means` field as the authority for entity matching.
   - Reject generic-word usage and wrong entities, especially for ambiguous keywords like `profound`.
   - Do not alert from title/snippet keyword presence alone. When the snippet leaves the verdict unclear, read the article before deciding.

   Use these verdicts:

   - `real_feature`: the article is substantially about the intended entity/product/person. Alert.
   - `substantive_mention`: meaningful paragraph-level mention, but not a feature. Save, normally no alert.
   - `passing_mention`: brief mention only. Save, no alert.
   - `wrong_entity`: the keyword refers to something else. Save, no alert.
   - `junk`: SEO, scraper, duplicate landing page, job post, docs/help page, or non-news. Save, no alert.
   - `uncertain`: insufficient evidence. Save, no alert.

5. **Record only newly classified unknown items.**
   If there are no `unknown_items`, skip `coverage record` and report from the `coverage check` result.

   If you classified new items, write the minimum `decisions.json` needed by the CLI:

   ```json

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit d9b73ba

Download folder ↗
git clone https://github.com/elvisun/newsjack
git -C newsjack checkout d9b73ba47e88

The author documents no install command, so this uses the repository directly. Our verdict covers commit d9b73ba47e88 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source d9b73ba47e88

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/elvisun/coverage-tracker/badge.svg)](https://modelsatlas.com/skills/elvisun/coverage-tracker/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

newsjack-triage✓SAFE

elvisun/newsjack

Consolidate freshness-gated newsjack signals and route them by client standing before angle generation. Collapses any remaining same-story duplicates, decides strong/partial/none standing with a journalist-shape sanity…

★ 1.7kGrade B
meanest-editor✓SAFE

elvisun/newsjack

Roast a pitch or press release with the eye of a veteran PR director. Honest, sharp, constructive — never cruel for its own sake.

★ 1.7kGrade B
news-search✓SAFE

elvisun/newsjack

Search current news for a topic, company, competitor, or hook and return dated, attributed articles. Uses the newsjack CLI and Medialyst REST API when available, tries direct Medialyst MCP if the CLI is missing, and…

★ 1.7kGrade B
journalist-fit-check✓SAFE

elvisun/newsjack

Gate a pitch against one journalist at a time. Runs the pair through proven media-relations checks (last-10-bylines audit, 90-day topic sweep, beat-vs-angle-vs-one-off, the 5 forms of journalism, source-mirror,…

★ 1.7kGrade B
headline-generator✓SAFE

elvisun/newsjack

Generate headline candidates from a story's raw facts: news-style headlines, press-release headlines, and pitch subject lines. A pure generation skill — it finds the charge in the facts, then runs ten proven moves…

★ 1.7kGrade B
find-journalists✓SAFE

elvisun/newsjack

Build a researched, fit-checked journalist list for a specific PR campaign. Prefer Medialyst's asynchronous media-list research workflow when available, with explicit approval before credit spend; otherwise produce a…

★ 1.6kGrade B

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/elvisun/coverage-tracker/badge.svg)](https://modelsatlas.com/skills/elvisun/coverage-tracker/)

Questions about coverage-tracker

What does the coverage-tracker skill do?
The open-source skills that turn your agent into a full PR team.
Is coverage-tracker safe to install?
With care. The audit graded it B (89/100) and found 2 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can coverage-tracker access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does coverage-tracker work with?
Its documentation mentions claude-code, codex and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (d9b73ba47e88), read on 2026-10-21. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.