newsletter-curation

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's documentation references a remote installation script for the belt CLI tool (https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md).
  • [COMMAND_EXECUTION]: The skill uses the belt command-line tool to execute various tasks, such as finding content (belt app run tavily/search-assistant) and generating images from HTML (belt app run infsh/html-to-image).
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and curate untrusted data from the web (via search results from Tavily, Reddit, and Exa). This creates a surface where malicious instructions hidden in external content could potentially influence the agent's summarization or commentary during the curation process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:25 AM