content-repurposing
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
beltCLI tool to execute AI models and interact with social media platforms (e.g., posting to Twitter/X viax/post-create). This tool is declared in theallowed-toolsmetadata.- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install thebeltCLI package usingnpxand references documentation hosted on a public GitHub repository (inference-sh/skills). It also encourages adding additional skills from the same vendor vianpx skills add.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of processing external data. - Ingestion points: External text sources such as blog posts, newsletters, and podcast transcripts (specified in conversion recipes).
- Boundary markers: Absent; there are no clear delimiters or instructions to ignore embedded commands within the source content.
- Capability inventory: The skill has the ability to post content to social media (
x/post-create), generate images (falai/flux-dev-lora), and create audio/video assets. - Sanitization: No sanitization or validation of the input content is described, allowing potentially malicious instructions in a blog post to influence the generated social media output or media generation parameters.
Audit Metadata