Skills
skills/1nfsh/skills/newsletter-curation/Gen Agent Trust Hub

newsletter-curation

Fail

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • REMOTE_CODE_EXECUTION (CRITICAL): The command curl -fsSL https://cli.inference.sh | sh downloads a script and executes it directly in the shell. The domain inference.sh is not on the list of trusted external sources, presenting a significant risk of arbitrary code execution.
  • EXTERNAL_DOWNLOADS (MEDIUM): The skill uses npx skills add to download and install additional skills from the inference-sh source. These components are not verified and introduce untrusted dependencies.
  • PROMPT_INJECTION (LOW): The skill is vulnerable to indirect prompt injection due to its processing of external data. * Ingestion points: The skill ingests untrusted data from the web using tavily/search-assistant and exa/search. * Boundary markers: There are no delimiters or instructions to ignore embedded commands within the fetched content. * Capability inventory: The skill has access to social media posting via x/post-create and CLI login functionality. * Sanitization: No sanitization or validation is applied to the external content before it is used to generate newsletters or social posts.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 18, 2026, 01:56 AM
Security Audit — agent-trust-hub — newsletter-curation