press-release-writing

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the belt CLI tool to execute search and fact-checking queries. Usage is restricted via the allowed-tools configuration to only permit belt commands.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the belt-sh/cli tool via npx and points to documentation hosted on GitHub. These references are used to set up the necessary research infrastructure for the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from search tools (Tavily and Exa) to assist with fact-checking, which creates a potential surface for indirect prompt injection from the retrieved content.
  • Ingestion points: Data returned from belt app run for search and answer tools.
  • Boundary markers: None identified in the provided instructions.
  • Capability inventory: Shell command execution restricted to the belt tool.
  • Sanitization: No specific sanitization or filtering of search results is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:25 AM