happyhorse
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions and configuration files hosted on the official GitHub repository for the
inference-shplatform. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
beltCLI tool to run AI models. This is restricted via theallowed-tools: Bash(belt *)configuration, which limits execution to specific subcommands of thebelttool. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a proxy for video generation by ingesting user-provided prompts, images, and video URLs.
- Ingestion points: User input enters the agent context through the
prompt,reference_images, andvideoparameters inSKILL.mdexamples. - Boundary markers: The skill uses structured JSON objects within the
--inputflag to pass data to thebeltCLI, providing a degree of separation between data and instructions. - Capability inventory: The skill uses the
beltcommand to interface with remote APIs. - Sanitization: The skill relies on the underlying
beltCLI and inference.sh backend to handle sanitization of generated content.
Audit Metadata