p-video
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
belt-sh/clitool vianpx skills addand references installation instructions hosted on GitHub atraw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. These resources originate from the official repository of the inference.sh service. - [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool to interact with the inference.sh platform. Commands such asbelt login,belt app run, andbelt app listare documented to perform video generation, authentication, and service discovery. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes user-provided prompts, image URLs, and audio URLs which are then passed as arguments to the
beltCLI tool. - Ingestion points: User input for
prompt,image, andaudiofields in the JSON input tobelt app runcommands. - Boundary markers: None explicitly defined in the provided command templates.
- Capability inventory: The skill uses the
Bashtool to execute thebeltCLI, which performs network operations to the inference.sh API. - Sanitization: There is no explicit sanitization or escaping shown for the user-provided strings before they are interpolated into the shell command.
Audit Metadata