technical-blog-writing
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
belt-sh/cliand additional modular skills from theinference-shGitHub repository. These downloads are necessary for the skill's core functionality. - [COMMAND_EXECUTION]: Uses the
beltCLI tool to run specific applications for searching, image generation, and social media posting. These commands are transparently documented as part of the intended workflow. - [REMOTE_CODE_EXECUTION]: Includes an example that executes a Python script within the
infsh/python-executorenvironment. The script is used for data visualization (plotting a chart with matplotlib) and is explicitly visible in the skill instructions. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data from web searches and HTML templates.
- Ingestion points: Search query inputs in
exa/searchand HTML content ininfsh/html-to-imagewithinSKILL.md. - Boundary markers: Data is passed through structured JSON fields.
- Capability inventory: The agent can execute system commands, run Python scripts, and perform network requests via the
beltCLI. - Sanitization: No explicit sanitization of external search results or HTML inputs is defined.
Audit Metadata