content-repurposing

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the belt CLI to run various applications for tasks like image generation, text-to-speech, and social media posting. The execution environment restricts Bash to commands starting with belt, but these operations involve remote service interaction and processing of user data.
  • [EXTERNAL_DOWNLOADS]: The skill instructions guide users to install the belt CLI and related skills using npx commands and provides a link to an external installation script on GitHub (raw.githubusercontent.com/inference-sh/skills/main/cli-install.md).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external content such as blog posts, podcast transcripts, and videos, presenting a risk of indirect prompt injection.
  • Ingestion points: The skill ingests external data for repurposing, including blog text and podcast audio.
  • Boundary markers: The instructions do not define boundary markers or safety delimiters for the content being processed.
  • Capability inventory: The skill has the capability to post to external social media platforms and run remote AI models via the belt CLI.
  • Sanitization: No sanitization or filtering methods for incoming content are specified in the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:22 PM
Security Audit — agent-trust-hub — content-repurposing