content-repurposing

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the infsh CLI to execute various tasks, including image generation (falai/flux-dev-lora), text-to-speech (falai/dia-tts), and social media posting (x/post-create).
  • [EXTERNAL_DOWNLOADS]: Recommends installing additional skills from the inference-sh repository via npx. These are identified as vendor-owned resources and do not escalate the verdict.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes external content like blog posts or podcast transcripts.
  • Ingestion points: Various conversion recipes process long-form source text from external files or user input.
  • Boundary markers: The skill does not implement boundary markers or instructions to disregard embedded commands within the source material.
  • Capability inventory: It uses infsh app run which includes the ability to automate social media posts and generate content.
  • Sanitization: No sanitization or filtering of the source content is mentioned before it is processed by conversion tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 09:30 PM