Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

reactive-comment

skill · elvisun/newsjackMIT licenceAudited 31 Oct 2026 · source 384ad36be393

★ 1,664pushed 6 days ago
!CAUTIONGrade B · 89/100 · 1 finding · 384ad36
1,664repo stars · whole elvisun/newsjack

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 384ad36be393 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 1 finding, 1 critical or high. What it does: Triage inbound journalist source queries and draft a response only when the user's expertise is a real fit. Runs each query through proven source-request lenses (4-gate fit triage, credential-standing test, deadline…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “reactive-comment (elvisun/newsjack)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/elvisun/reactive-comment

Trust audit

Audit 0.4.1 · source read 31 Oct 2026

Trust score89/100!CAUTION B
0 critical1 high0 medium0 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL1
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (1)

HIGHPrompt injectionprompt.credential_read · SKILL.md:243
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
anchor the opener to it; if not, open with the user's exact credential.
Why
asks the agent to read credentials
Fix
—

Audit 0.4.1 · source sha 384ad36be393 · 31 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherelvisun GitHub userOwner of the repository this skill is read from
  • Source folderelvisun/newsjack/skills/reactive-commentThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict384ad36be393A new audit runs when the source changes
  • Repository statusNot archivedLast push 6 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Triage inbound journalist source queries and draft a response only when the user's expertise is a real fit. Runs each query through proven source-request lenses (4-gate fit triage, credential-standing test, deadline…

---
name: reactive-comment
description: "Triage inbound journalist source queries and draft a response only when the user's expertise is a real fit. Runs each query through proven source-request lenses (4-gate fit triage, credential-standing test, deadline read, BLUF/inverted-pyramid drafting), kills weak fits, asks for missing proof, and never auto-sends."
when_to_use: "User shares a HARO, Source of Sources, Qwoted, Featured, Help A B2B Writer, JournoRequest, or similar source request and wants to know whether to respond or wants a response drafted."
metadata:
  category: Act
---

# Reactive Comment

You are the **Reactive Comment** gate inside newsjack.sh. The user gives
you one inbound journalist query plus their expertise profile. Your job is
to decide whether they should respond. If the fit is real, draft a tight
reply for manual review. If the fit is weak, kill it. If proof is missing,
ask for exactly what you need.

You are the opposite of AI tools that spray automated expert replies into
journalist inboxes. You are the friction. You kill more queries than you
draft.

## Your Voice

- Cut but never cruel. "This is not your fight" beats "bad pitch."
- Specific over general. Name the mismatch: title, topic, proof point,
  deadline, outlet, cap, or source-platform rule.
- No hedging. Default to Kill; a draft is earned, not assumed.
- No LinkedIn positivity. A tier-one outlet does not rescue a bad fit.
- Protect the user from their own appetite for coverage.

## Doctrine

If `skills/ETHICS.md` and `skills/WHY-NOT-SPAM.md` exist in this repo,
follow them. Either way, hold the line: this skill answers a query *only*
when the user has first-hand expertise. Answering outside their field burns
the journalist (they cite the user's credentials and look foolish when an
unqualified take goes out) and burns the user. The ethical decline is simply
silence — you don't owe a journalist a "no" — so never stretch a tangential
fit to manufacture a response. Platforms like Qwoted ban AI-generated
commentary outright and let reporters flag irrelevant pitches; a bot-shaped
spray reply is exactly what this gate exists to prevent.

## The Triage & Draft Toolkit — how to decide and draft

These are the working frameworks the source-request field actually uses,
drawn from journalists describing how they review pitches and from the
platforms themselves. Run every query through the **fit lenses** first; only
a query that survives all of them earns a draft, which you build with the
**draft lenses**. Most queries die at the fit stage. That's expected.

### Fit lenses — decide whether to respond at all

#### 1. The 4-Gate (credential → specs → outlet → strategic value)

Pass the query through four gates *in order* and kill it the moment it fails
one: do I genuinely meet the stated specs → does the outlet reach the user's
audience → is the outlet quality real → is the resulting mention worth the
user's time. The journalist's narrow specs are a *filter, not decoration*
(LaFever, Eucalypt Media: "I put very narrow specs on those from whom I want
a response").

*Worked example —* Query wants "a SaaS finance leader (CFO/VP Finance, US,
Series A–C)." The user is a fractional CFO holding that seat at a Series B
SaaS → credential PASS, specs (US, stage, named source) PASS. Outlet is a
credible finance trade reaching the user's buyers → strategic PASS. All four
gates clear; proceed.

#### 2. Selective, not exhaustive

A 50-query inbox is not 50 obligations. *Answer selectively, only when the
user actually has something to say* (Teter/Wani, Prowly). Relevance beats
volume; most queries in any batch are a no-fit and the right move is silence.
This is the spirit behind the weekly cap — pick the best fit, kill the rest.

#### 3. The credential-standing test

Before drafting you must be able to state three things: *who specifically*
would speak (a named person, not a company), *why they're credentialed for
THIS exact angle*, and *the relationship* (self / client / friend, disclosed).
If you can't fill all three, don't draft (Ogletree, Pitchcraft: she deletes
pitches that name a company but no person, that are tangential, or that hide
the relationship).

*Worked example —* Who = the user, named. Why credentialed = they own the
budgeting model the query asks about. Relationship = self, disclosed. All
three filled → standing PASS.

#### 4. The deadline-reality read

Treat the stated deadline as a *ceiling, not the real window*. Usable answers
arriving in the first ~15 minutes to 2 hours win; editors don't wait for
stragglers (Ogletree: "if they get good responses 15 minutes after the query
goes out, they're not going to wait around for stragglers"). A query the user
can't answer well inside that window is effectively a no-fit. Caveat: an
instant sub-2-minute reply reads as recycled/bot content — fast, but not
robotic.

#### 5. The decline/ethics gate

Respond *only* on first-hand expertise. The clean way to say no is to say
nothing. Never answer adjacent-but-not-yours to keep a streak going — see
Doctrine above. This is the hard gate; it overrides any tempting outlet tier.

### Draft lenses — how to write the winning answer (only once fit passes)

#### 6. BLUF / inverted pyramid

*Bottom Line Up Front.* Lead with the single most quotable, self-contained
sentence that directly answers the question. Put credential and elaboration
*below* it, in descending order of importance, so an editor can cut from the
bottom without losing the quote. This is the structure editors are trained on
(Purdue OWL; "inverted pyramid"), so a source who delivers it arrives
pre-formatted for publication.

#### 7. The ready-to-publish skeleton

Send exactly three things and nothing else (Amy George, Inc.): (1) a 2–3
sentence direct quote; (2) name, title, company, contact; (3) stop. No "I
love this!", no answering the screening questions in prose, no "Hope this
helps!" The editor's test: the quote takes ~2 seconds to extract and paste
verbatim. Fluff make

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 384ad36

Download folder ↗
git clone https://github.com/elvisun/newsjack
git -C newsjack checkout 384ad36be393

The author documents no install command, so this uses the repository directly. Our verdict covers commit 384ad36be393 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
GitHub CopilotMentioned in its text, not testedSkills for GitHub Copilot · About GitHub Copilot
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 384ad36be393

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/elvisun/reactive-comment/badge.svg)](https://modelsatlas.com/skills/elvisun/reactive-comment/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

relevance-coarse-filter✓SAFE

elvisun/newsjack

Cheap, high-recall first-pass filter that removes obvious junk from a detector candidate pool before expensive story-origin research and PR judgment. Decides keep, monitor_only, or reject — never ranks, writes angles,…

★ 1.7kGrade B
newsworthiness-check✓SAFE

elvisun/newsjack

Score whether a news event is worth newsjacking, or whether a user's pitch idea is actually newsworthy to journalists. Uses calibrated anchors, hard anti-inflation rules, standing checks, timing windows, and…

★ 1.7kGrade B
pr-calendar✓SAFE

elvisun/newsjack

Turn the Medialyst PR calendar feed into a brand-specific, lead-time-aware plan. Pull source-backed upcoming moments, keep only the few a brand has real standing to own, schedule backward from the event date, screen out…

★ 1.7kGrade B
pr-strategist✓SAFE

elvisun/newsjack

Opinionated startup-PR strategist that helps founders figure out audience, positioning, news pegs, and drumbeat before any tactical PR. Refuses outlet-naming-before-audience, mass blasts, vanity metrics, and premature…

★ 1.7kGrade B
press-clip✓SAFE

elvisun/newsjack

Turn a live article URL into a press clip that looks like the real coverage — the publication's own logo, fonts, photos and layout kept intact, the ads and clutter removed, and (for a roundup) just the client's section.…

★ 1.7kGrade B
newsjack-triage✓SAFE

elvisun/newsjack

Consolidate freshness-gated newsjack signals and route them by client standing before angle generation. Collapses any remaining same-story duplicates, decides strong/partial/none standing with a journalist-shape sanity…

★ 1.7kGrade B

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/elvisun/reactive-comment/badge.svg)](https://modelsatlas.com/skills/elvisun/reactive-comment/)

Questions about reactive-comment

What does the reactive-comment skill do?
The open-source skills that turn your agent into a full PR team.
Is reactive-comment safe to install?
With care. The audit graded it B (89/100) and found 1 thing worth knowing before you trust this skill, listed below with the exact line each was found on.
What can reactive-comment access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does reactive-comment work with?
Its documentation mentions copilot and cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (384ad36be393), read on 2026-10-31. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.