speech-to-text
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as documentation for the
beltCLI tool provided by inference.sh. No malicious behavior, obfuscation, or unauthorized access patterns were found. - [EXTERNAL_DOWNLOADS]: The skill references image assets and installation documentation from the official
inference.shdomain and its public GitHub repository. These sources are considered legitimate for the tool's functionality. - [COMMAND_EXECUTION]: The skill instructions utilize the
beltcommand-line utility. The execution is properly scoped within theallowed-toolssection of the YAML frontmatter, limiting the agent's actions to the intended toolset. - [PROMPT_INJECTION]: Analyzed the skill for potential indirect prompt injection risks.
- Ingestion points: External audio files provided via
audio_urlin thebelt app runcommands. - Boundary markers: Absent; transcribed content is not explicitly delimited.
- Capability inventory: The skill utilizes
Bash(belt *)for operation execution. - Sanitization: Not specified in the instructions. While a transcript could theoretically contain malicious instructions, this is an inherent property of speech-to-text tools and does not represent a unique vulnerability in the skill's design.
Audit Metadata