content-repurposing
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI (from inference.sh) to execute various AI-powered applications. These includefalai/flux-dev-lorafor image generation,x/post-createfor publishing to X (Twitter),google/veo-3-1-fastfor video creation, andfalai/dia-ttsfor text-to-speech conversion. All commands are scoped within theBash(belt *)tool restriction. - [EXTERNAL_DOWNLOADS]: The documentation provides links to installation instructions for the required CLI tool hosted on GitHub (
inference-sh/skills). This is a prerequisite for the skill's functionality. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It processes external data sources such as blog posts and podcast transcripts and interpolates them into prompts for AI generation and social media posting without explicit sanitization or boundary markers.
- Ingestion points: Data is ingested from long-form source content like blog posts, podcast transcripts, and video scripts (referenced in
SKILL.md). - Boundary markers: There are no specific boundary markers or instructions to ignore embedded commands in the templates provided for repurposing.
- Capability inventory: The skill has the capability to write to external platforms (
x/post-create) and generate various media assets via AI apps (belt app run). - Sanitization: The skill lacks sanitization or validation steps for the input content before it is passed to the AI models or the posting tool.
Audit Metadata