ai-automation-workflows
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill includes templates that process external data from files or command-line arguments and interpolate them into AI model prompts. This creates a surface for indirect prompt injection if the processed content is untrusted.
- Ingestion points: Ingestion of
$1inconditional_workflow.shand$(cat $file)indata_processing.sh. - Boundary markers: Not present in the provided templates.
- Capability inventory: The templates use the
beltCLI to run AI apps, write to the local filesystem, and usecurlfor alerting. - Sanitization: No data sanitization or escaping is implemented in the examples.
- [EXTERNAL_DOWNLOADS]: The skill references external resources for tool installation and provides commands to add additional modular skills from the vendor's repository.
- Evidence: Usage of
npx skills addfor severalinference-sh/skillspackages and documentation links toraw.githubusercontent.com/inference-sh/skills/.
Audit Metadata