flux-image
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate wrapper for interacting with image generation models on the inference.sh platform using the 'belt' CLI tool.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute the 'belt' command for authentication and model execution. The execution environment is restricted by the 'allowed-tools' configuration to only permit the 'belt' command, which follows the principle of least privilege.
- [EXTERNAL_DOWNLOADS]: The skill points to installation instructions and configuration files hosted on the inference-sh GitHub organization. These references are used for standard setup of the required CLI tool.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text prompts to pass to the image generation models. This is the primary intended function of the skill, and the execution is restricted to the specific inference tool.
Audit Metadata