content-repurposing
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection due to the lack of isolation for ingested data.
- Ingestion points: The skill is designed to process external content such as blog posts and podcast transcripts to generate social media derivative assets (SKILL.md).
- Boundary markers: There are no delimiters or specific instructions for the agent to ignore embedded commands within the source content.
- Capability inventory: The skill uses the Bash tool to execute belt CLI commands, which can post generated content directly to social media platforms via applications like x/post-create.
- Sanitization: There is no evidence of validation or escaping performed on the input content before it is processed by the AI applications.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install necessary tools and related skills from the belt-sh and inference-sh namespaces via npx and provides links to documentation hosted on GitHub. These resources are part of the intended platform environment.
Audit Metadata