ai-podcast-creation
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
beltCLI tool and related skills from the vendor's repository and thebelt-shNPM package. These resources are part of the vendor's supported ecosystem. - [COMMAND_EXECUTION]: The skill uses the
beltCLI to perform audio generation and manipulation. The use of the shell is restricted to thebeltcommand via the skill's frontmatter configuration, which limits the potential for unauthorized command execution. - [PROMPT_INJECTION]: The skill features workflows that ingest external content, such as documents for "NotebookLM-style" podcast generation, into LLM prompts. This is a common pattern for content generation skills.
- Ingestion points: User-provided document content and generated script segments are interpolated into prompts for the Claude LLM.
- Boundary markers: No specific delimiters or boundary instructions are used in the prompt templates to separate user data from instructions.
- Capability inventory: The skill possesses the capability to execute shell commands via the
beltCLI. - Sanitization: No explicit sanitization or filtering of the user-provided data is documented before it is passed to the LLM.
Audit Metadata