ai-social-media-content
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
beltCLI commands via Bash to interact with various AI model endpoints for generating media and text. - [EXTERNAL_DOWNLOADS]: The skill references installation instructions for the
beltCLI and recommends adding related skills from theinference-shorganization on GitHub. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its workflow of chaining outputs between different AI models.
- Ingestion points: Data generated by language models (e.g., Claude) is saved to files like
script.jsonand subsequently used as input prompts for downstream tools likekokoro-ttsandomnihuman-1-5. - Boundary markers: No delimiters or instructions to ignore embedded commands are present when interpolating model-generated content into new prompts.
- Capability inventory: The skill possesses the capability to execute shell commands (
belt) and interact with external APIs, including social media platforms (twitter/post-tweet). - Sanitization: There is no evidence of sanitization or escaping of the content produced by LLMs before it is processed by subsequent tools in the pipeline.
Audit Metadata