ai-image-generation

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides links to official installation scripts and documentation hosted on the inference-sh GitHub organization (e.g., inference-sh/skills) and its official domain.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text prompts to generate images, which represents an ingestion surface for potentially malicious data.
  • Ingestion points: The prompt field within the JSON input for the belt app run command throughout SKILL.md.
  • Boundary markers: None identified; user input is passed directly as a string parameter.
  • Capability inventory: Uses the Bash tool to execute belt CLI commands.
  • Sanitization: No sanitization or filtering logic is specified within the skill markdown.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:25 AM