case-study-writing
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by fetching data from external web sources and processing it within an environment that has code execution capabilities.
- Ingestion points: The skill retrieves untrusted data from the internet using search tools such as
tavily/search-assistant,exa/search, andexa/answervia thebeltCLI. - Boundary markers: There are no explicit markers or instructions defined to isolate the content retrieved from the web from the rest of the agent's context.
- Capability inventory: The skill has access to the
Bashtool and uses theinfsh/python-executorapplication to execute Python scripts at runtime. - Sanitization: No mechanisms for filtering or sanitizing the retrieved search results are implemented before the data is utilized in prompt generation or script execution.
- [DYNAMIC_EXECUTION]: The skill generates and runs Python code during runtime to create visual charts, using the
infsh/python-executortool within thebeltenvironment. - [EXTERNAL_DOWNLOADS]: The skill instructs users to install a CLI tool from
belt-sh/cliand references an external installation script hosted athttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md.
Audit Metadata