case-study-writing
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external search providers (Tavily and Exa) to gather industry context and benchmarks.
- Ingestion points: Results from
tavily/search-assistant,exa/search, andexa/answerare brought into the agent's context in SKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential malicious content embedded in search results.
- Capability inventory: The skill has access to file-writing tools (via Python execution) and further network operations via the
beltCLI. - Sanitization: No explicit sanitization or filtering of the external search content is performed before processing.
- [DYNAMIC_EXECUTION]: The skill uses the
infsh/python-executorapp to run Python code at runtime for the purpose of generating data visualization charts. - Evidence: A script using
matplotlibis passed as input tobelt app run infsh/python-executorto generateresults-chart.png. - [EXTERNAL_DOWNLOADS]: The skill references installation instructions and tools hosted on external domains associated with the platform's infrastructure.
- Evidence: References to
npx skills add belt-sh/cliand configuration guidelines hosted atraw.githubusercontent.com/inference-sh/skills/. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through the
beltCLI tool, which is scoped within theallowed-toolsfrontmatter to manage application runs and research queries.
Audit Metadata