seo-content-brief
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing external packages and follows instructions from remote sources to set up its environment.
- The skill instructs the user to install the
belt-sh/cliand other associated skills usingnpx(SKILL.md). - It references a remote Markdown file at
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.mdfor installation guidance (SKILL.md). - [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by ingesting and processing data from external web sources.
- Ingestion points: The skill utilizes
tavily/search-assistant,tavily/extract, andexa/searchto fetch external web content into the agent's context for analysis (SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore potentially malicious embedded instructions were found in the example prompts provided.
- Capability inventory: The skill is granted
Bash(belt *)access, allowing the agent to execute CLI tools within the belt ecosystem (SKILL.md). - Sanitization: No evidence of data sanitization or filtering was observed for the content ingested from the search tools.
Audit Metadata