ai-automation-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains several templates that ingest untrusted data and interpolate it directly into AI prompts.
- Ingestion points: The script
conditional_workflow.shaccepts user-supplied text via command-line arguments. The scriptdata_processing.shreads the contents of local text files usingcatand embeds them into a prompt. - Boundary markers: Absent. The scripts perform simple string interpolation without delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill utilizes the
beltCLI to execute AI models, performs file operations via shell redirection, and includes an example (monitored_workflow.sh) that usescurlfor network requests. - Sanitization: Absent. Content is passed directly to the model as part of the prompt string.
- [PERSISTENCE]: The skill provides explicit instructions for establishing persistence through system scheduling tools. It includes
crontabtemplates to execute automation scripts at regular intervals (daily, weekly, and every 6 hours). - [EXTERNAL_DOWNLOADS]: The skill references external resources for installation, specifically linking to a CLI installation guide hosted at
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. - [COMMAND_EXECUTION]: The skill relies heavily on shell scripting for workflow orchestration. It provides multiple Bash script patterns and a Python script that uses
subprocess.runto execute system commands via thebeltCLI.
Audit Metadata