product-hunt-launch
Warn
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install an external command-line interface (CLI) tool
belt-sh/clivianpx. It also references installation instructions from a raw GitHub URLhttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.mdwhich is not a verified source. - [REMOTE_CODE_EXECUTION]: The skill utilizes a custom CLI tool (
belt) to trigger the execution of remote applications and models hosted on theinference.shplatform. These applications (e.g.,falai/flux-dev-lora,tavily/search-assistant,exa/search) perform significant computational tasks like image generation and web searches on remote infrastructure managed by a third party. - [COMMAND_EXECUTION]: The skill requires access to the
Bashtool and specifiesbelt *in itsallowed-toolsconfiguration. This permits the AI agent to execute shell commands through thebeltCLI for research, image generation, and asset manipulation tasks.
Audit Metadata