ai-podcast-creation
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
beltCLI tool (npx skills add belt-sh/cli) and several related skills from theinference-shorganization on GitHub. These are necessary dependencies for the skill's primary functionality. - [COMMAND_EXECUTION]: The skill makes extensive use of the
belt app runcommand to execute various AI models (TTS, Music Generation, LLMs) hosted on the inference.sh platform. While these are documented as the intended use case, they involve executing logic on a remote service. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted documents and scripts to generate podcast content. This creates an attack surface where malicious instructions hidden in the input data could attempt to influence the behavior of the LLM or TTS engines used in the pipeline.
Audit Metadata