ai-social-media-content
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
belt-sh/cliand other skills from theinference-shrepository using thenpx skills addcommand. It also links to external installation instructions hosted athttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. - [COMMAND_EXECUTION]: The skill relies on the
Bash(belt *)tool to run thebeltCLI, which executes remote AI models and interacts with social media platforms (e.g., posting to Twitter). - [INDIRECT_PROMPT_INJECTION]: Multiple shell script examples in the documentation interpolate user-supplied or AI-generated variables (
$i,$CONCEPT,$topic,$script) directly into shell command arguments without sanitization or escaping. - Ingestion points: Variables defined in bash
forloops and script definitions withinSKILL.md. - Boundary markers: None. The variables are placed directly inside string-interpolated JSON payloads passed to the CLI.
- Capability inventory: The skill uses
Bashto invoke thebeltutility for remote model execution. - Sanitization: No escaping or input validation is present in the bash examples to prevent shell meta-character injection (e.g., if a variable value contained backticks or semicolons).
Audit Metadata