content-repurposing

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation instructions for its CLI tool from the vendor's official GitHub repository at raw.githubusercontent.com/inference-sh/skills.
  • [COMMAND_EXECUTION]: The skill uses the belt CLI tool to perform content transformations, including image generation, voiceover creation, and automated social media posting.
  • [PROMPT_INJECTION]: The skill includes an indirect prompt injection surface as its primary function is to process untrusted external content (such as blog posts and podcast transcripts) for repurposing.
  • Ingestion points: Untrusted content is ingested as input for transformation tools within SKILL.md.
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the provided templates.
  • Capability inventory: The skill can execute shell commands via belt to post to social media and generate media assets.
  • Sanitization: No input sanitization or validation mechanisms are described for the processed content.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 01:11 PM