press-release-writing

Warn

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install a CLI tool via npx skills add belt-sh/cli and provides links to external installation scripts at https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. These resources originate from an external source not recognized as a well-known service or trusted organization.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run belt commands, including belt login and belt app run. These commands execute logic and remote applications from the inference.sh platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data retrieved from external tools (search results) and user-supplied content without explicit boundary markers or sanitization.
  • Ingestion points: Research data entering via belt app run in SKILL.md.
  • Boundary markers: Absent; external content is interpolated directly into the writing workflow.
  • Capability inventory: Bash(belt *) capability used for research and tool execution.
  • Sanitization: Absent; no filtering or escaping of external search results or user input is performed before generation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 2, 2026, 02:21 PM