newsletter-curation
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process data from external web sources, which presents a surface for indirect prompt injection if the ingested content contains malicious instructions aimed at the AI.
- Ingestion points: Fetches content using
belt app run tavily/search-assistantandbelt app run exa/search(SKILL.md). - Boundary markers: The skill's markdown templates do not explicitly provide delimiters or instructions for the agent to ignore instructions embedded within the curated links or summaries.
- Capability inventory: The skill has access to the
beltCLI tool, which can run various apps including search assistants and social media posters (x/post-create). - Sanitization: No specific sanitization or filtering mechanisms for the content retrieved from search results are defined in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill utilizes and recommends the installation of external tools and dependencies associated with the platform ecosystem.
- Recommends installing the
beltCLI vianpx skills add belt-sh/cli. - References external installation documentation hosted on GitHub at
raw.githubusercontent.com/inference-sh/skills/. - Suggests adding related skills from the
inference-sh/skillsrepository. - [COMMAND_EXECUTION]: The skill provides various shell commands for the agent to execute using the
beltutility. - Includes commands for authentication (
belt login), content discovery, and automated social media posting.
Audit Metadata