happyhorse
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions hosted on GitHub for the inference.sh platform. These references target a well-known service and are documented for user setup purposes.
- [COMMAND_EXECUTION]: The skill provides examples for using the
beltCLI (inference.sh command-line tool) to execute video generation and editing tasks viabelt app run. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting untrusted data through parameters such as
prompt,first_frame,reference_images, andvideoURLs. - Ingestion points: Untrusted data enters the agent context through CLI arguments passed to
belt app runinSKILL.mdexamples. - Boundary markers: No explicit boundary markers or safety instructions are present in the examples to delimit user input from command structure.
- Capability inventory: The skill utilizes the
Bashtool to execute thebeltCLI, which performs network operations to the inference.sh API. - Sanitization: Input sanitization is not explicitly defined within the skill documentation, relying on the underlying
beltCLI and the Alibaba API for safety filtering.
Audit Metadata