app-store-screenshots
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
belt-sh/clipackage vianpxand references installation instructions hosted on GitHub (inference-sh/skills). These resources are necessary for the skill's operation and are directly related to the service provider. - [COMMAND_EXECUTION]: The skill utilizes the
beltcommand-line tool to execute remote AI models for generating marketing assets. Theallowed-toolsconfiguration correctly limits the scope to thebeltcommand. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection as it processes natural language prompts to drive image and video generation tools.
- Ingestion points: The prompt fields within the JSON
--inputblocks inSKILL.mdused for AI model generation. - Boundary markers: Absent; the prompts are provided as direct string values within JSON objects without explicit delimiters.
- Capability inventory: Invokes the
beltCLI tool to perform network-based AI inference for asset creation. - Sanitization: Absent; the skill instructions do not provide methods for sanitizing or escaping user-provided prompt content.
Audit Metadata