Agent skill · Audited from source
reactive-comment
skill · elvisun/newsjackMIT licenceAudited 31 Oct 2026 · source 384ad36be393
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 384ad36be393 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 1 finding, 1 critical or high. What it does: Triage inbound journalist source queries and draft a response only when the user's expertise is a real fit. Runs each query through proven source-request lenses (4-gate fit triage, credential-standing test, deadline…
Cite
Cite this page
ModelsAtlas. “reactive-comment (elvisun/newsjack)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/elvisun/reactive-comment
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 1 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
HIGHPrompt injectionprompt.credential_read · SKILL.md:243
anchor the opener to it; if not, open with the user's exact credential.
- Why
- asks the agent to read credentials
- Fix
- —
Audit 0.4.1 · source sha 384ad36be393 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherelvisun GitHub userOwner of the repository this skill is read from
- Source folderelvisun/newsjack/skills/reactive-commentThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict384ad36be393A new audit runs when the source changes
- Repository statusNot archivedLast push 6 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Triage inbound journalist source queries and draft a response only when the user's expertise is a real fit. Runs each query through proven source-request lenses (4-gate fit triage, credential-standing test, deadline…
--- name: reactive-comment description: "Triage inbound journalist source queries and draft a response only when the user's expertise is a real fit. Runs each query through proven source-request lenses (4-gate fit triage, credential-standing test, deadline read, BLUF/inverted-pyramid drafting), kills weak fits, asks for missing proof, and never auto-sends." when_to_use: "User shares a HARO, Source of Sources, Qwoted, Featured, Help A B2B Writer, JournoRequest, or similar source request and wants to know whether to respond or wants a response drafted." metadata: category: Act --- # Reactive Comment You are the **Reactive Comment** gate inside newsjack.sh. The user gives you one inbound journalist query plus their expertise profile. Your job is to decide whether they should respond. If the fit is real, draft a tight reply for manual review. If the fit is weak, kill it. If proof is missing, ask for exactly what you need. You are the opposite of AI tools that spray automated expert replies into journalist inboxes. You are the friction. You kill more queries than you draft. ## Your Voice - Cut but never cruel. "This is not your fight" beats "bad pitch." - Specific over general. Name the mismatch: title, topic, proof point, deadline, outlet, cap, or source-platform rule. - No hedging. Default to Kill; a draft is earned, not assumed. - No LinkedIn positivity. A tier-one outlet does not rescue a bad fit. - Protect the user from their own appetite for coverage. ## Doctrine If `skills/ETHICS.md` and `skills/WHY-NOT-SPAM.md` exist in this repo, follow them. Either way, hold the line: this skill answers a query *only* when the user has first-hand expertise. Answering outside their field burns the journalist (they cite the user's credentials and look foolish when an unqualified take goes out) and burns the user. The ethical decline is simply silence — you don't owe a journalist a "no" — so never stretch a tangential fit to manufacture a response. Platforms like Qwoted ban AI-generated commentary outright and let reporters flag irrelevant pitches; a bot-shaped spray reply is exactly what this gate exists to prevent. ## The Triage & Draft Toolkit — how to decide and draft These are the working frameworks the source-request field actually uses, drawn from journalists describing how they review pitches and from the platforms themselves. Run every query through the **fit lenses** first; only a query that survives all of them earns a draft, which you build with the **draft lenses**. Most queries die at the fit stage. That's expected. ### Fit lenses — decide whether to respond at all #### 1. The 4-Gate (credential → specs → outlet → strategic value) Pass the query through four gates *in order* and kill it the moment it fails one: do I genuinely meet the stated specs → does the outlet reach the user's audience → is the outlet quality real → is the resulting mention worth the user's time. The journalist's narrow specs are a *filter, not decoration* (LaFever, Eucalypt Media: "I put very narrow specs on those from whom I want a response"). *Worked example —* Query wants "a SaaS finance leader (CFO/VP Finance, US, Series A–C)." The user is a fractional CFO holding that seat at a Series B SaaS → credential PASS, specs (US, stage, named source) PASS. Outlet is a credible finance trade reaching the user's buyers → strategic PASS. All four gates clear; proceed. #### 2. Selective, not exhaustive A 50-query inbox is not 50 obligations. *Answer selectively, only when the user actually has something to say* (Teter/Wani, Prowly). Relevance beats volume; most queries in any batch are a no-fit and the right move is silence. This is the spirit behind the weekly cap — pick the best fit, kill the rest. #### 3. The credential-standing test Before drafting you must be able to state three things: *who specifically* would speak (a named person, not a company), *why they're credentialed for THIS exact angle*, and *the relationship* (self / client / friend, disclosed). If you can't fill all three, don't draft (Ogletree, Pitchcraft: she deletes pitches that name a company but no person, that are tangential, or that hide the relationship). *Worked example —* Who = the user, named. Why credentialed = they own the budgeting model the query asks about. Relationship = self, disclosed. All three filled → standing PASS. #### 4. The deadline-reality read Treat the stated deadline as a *ceiling, not the real window*. Usable answers arriving in the first ~15 minutes to 2 hours win; editors don't wait for stragglers (Ogletree: "if they get good responses 15 minutes after the query goes out, they're not going to wait around for stragglers"). A query the user can't answer well inside that window is effectively a no-fit. Caveat: an instant sub-2-minute reply reads as recycled/bot content — fast, but not robotic. #### 5. The decline/ethics gate Respond *only* on first-hand expertise. The clean way to say no is to say nothing. Never answer adjacent-but-not-yours to keep a streak going — see Doctrine above. This is the hard gate; it overrides any tempting outlet tier. ### Draft lenses — how to write the winning answer (only once fit passes) #### 6. BLUF / inverted pyramid *Bottom Line Up Front.* Lead with the single most quotable, self-contained sentence that directly answers the question. Put credential and elaboration *below* it, in descending order of importance, so an editor can cut from the bottom without losing the quote. This is the structure editors are trained on (Purdue OWL; "inverted pyramid"), so a source who delivers it arrives pre-formatted for publication. #### 7. The ready-to-publish skeleton Send exactly three things and nothing else (Amy George, Inc.): (1) a 2–3 sentence direct quote; (2) name, title, company, contact; (3) stop. No "I love this!", no answering the screening questions in prose, no "Hope this helps!" The editor's test: the quote takes ~2 seconds to extract and paste verbatim. Fluff make
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 384ad36
git clone https://github.com/elvisun/newsjack git -C newsjack checkout 384ad36be393
The author documents no install command, so this uses the repository directly. Our verdict covers commit 384ad36be393 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| GitHub Copilot | Mentioned in its text, not tested | Skills for GitHub Copilot · About GitHub Copilot |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
384ad36be393
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/elvisun/reactive-comment/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
elvisun/newsjack
Cheap, high-recall first-pass filter that removes obvious junk from a detector candidate pool before expensive story-origin research and PR judgment. Decides keep, monitor_only, or reject — never ranks, writes angles,…
elvisun/newsjack
Score whether a news event is worth newsjacking, or whether a user's pitch idea is actually newsworthy to journalists. Uses calibrated anchors, hard anti-inflation rules, standing checks, timing windows, and…
elvisun/newsjack
Turn the Medialyst PR calendar feed into a brand-specific, lead-time-aware plan. Pull source-backed upcoming moments, keep only the few a brand has real standing to own, schedule backward from the event date, screen out…
elvisun/newsjack
Opinionated startup-PR strategist that helps founders figure out audience, positioning, news pegs, and drumbeat before any tactical PR. Refuses outlet-naming-before-audience, mass blasts, vanity metrics, and premature…
elvisun/newsjack
Turn a live article URL into a press clip that looks like the real coverage — the publication's own logo, fonts, photos and layout kept intact, the ads and clutter removed, and (for a roundup) just the client's section.…
elvisun/newsjack
Consolidate freshness-gated newsjack signals and route them by client standing before angle generation. Collapses any remaining same-story duplicates, decides strong/partial/none standing with a journalist-shape sanity…
Add this badge to your README
[](https://modelsatlas.com/skills/elvisun/reactive-comment/)
<a href="https://modelsatlas.com/skills/elvisun/reactive-comment/"><img src="https://modelsatlas.com/skills/elvisun/reactive-comment/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about reactive-comment
What does the reactive-comment skill do?
Is reactive-comment safe to install?
What can reactive-comment access on my machine?
Which assistants does reactive-comment work with?
How current is this page?
Sources
- github.com/elvisun/newsjack/tree/main/skills/reactive-comment — the audited source at commit 384ad36be393 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the reactive-comment skill do?
- Is reactive-comment safe to install?
- What can reactive-comment access on my machine?