ai-video-generation
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the
beltCLI and related toolsets usingnpx skills add. These downloads originate from theinference-shandbelt-shrepositories and are fundamental to the skill's primary operation. - [COMMAND_EXECUTION]: The skill leverages the
beltcommand-line utility for user authentication and triggering AI video inference models. Notably, the skill explicitly restricts the execution environment using theallowed-toolsfrontmatter field, limiting the agent's shell access to thebeltcommand only. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data by interpolating user-provided text prompts and external resource URLs into CLI arguments.
- Ingestion points: User-provided JSON inputs passed to
belt app runcommands. - Boundary markers: None identified in the instructional examples.
- Capability inventory: Execution of external inference models and CLI commands.
- Sanitization: No explicit sanitization or validation of input prompts is described within the skill context.
Audit Metadata