newsletter-curation
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's documentation references a remote installation script for the
beltCLI tool (https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md). - [COMMAND_EXECUTION]: The skill uses the
beltcommand-line tool to execute various tasks, such as finding content (belt app run tavily/search-assistant) and generating images from HTML (belt app run infsh/html-to-image). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and curate untrusted data from the web (via search results from Tavily, Reddit, and Exa). This creates a surface where malicious instructions hidden in external content could potentially influence the agent's summarization or commentary during the curation process.
Audit Metadata