content-repurposing
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions for its CLI tool from the vendor's official GitHub repository at
raw.githubusercontent.com/inference-sh/skills. - [COMMAND_EXECUTION]: The skill uses the
beltCLI tool to perform content transformations, including image generation, voiceover creation, and automated social media posting. - [PROMPT_INJECTION]: The skill includes an indirect prompt injection surface as its primary function is to process untrusted external content (such as blog posts and podcast transcripts) for repurposing.
- Ingestion points: Untrusted content is ingested as input for transformation tools within
SKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the provided templates.
- Capability inventory: The skill can execute shell commands via
beltto post to social media and generate media assets. - Sanitization: No input sanitization or validation mechanisms are described for the processed content.
Audit Metadata