product-hunt-launch

Warn

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install an external command-line interface (CLI) tool belt-sh/cli via npx. It also references installation instructions from a raw GitHub URL https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md which is not a verified source.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes a custom CLI tool (belt) to trigger the execution of remote applications and models hosted on the inference.sh platform. These applications (e.g., falai/flux-dev-lora, tavily/search-assistant, exa/search) perform significant computational tasks like image generation and web searches on remote infrastructure managed by a third party.
  • [COMMAND_EXECUTION]: The skill requires access to the Bash tool and specifies belt * in its allowed-tools configuration. This permits the AI agent to execute shell commands through the belt CLI for research, image generation, and asset manipulation tasks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 2, 2026, 02:18 PM
Security Audit — agent-trust-hub — product-hunt-launch