ai-image-generation
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to official installation scripts and documentation hosted on the inference-sh GitHub organization (e.g.,
inference-sh/skills) and its official domain. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text prompts to generate images, which represents an ingestion surface for potentially malicious data.
- Ingestion points: The
promptfield within the JSON input for thebelt app runcommand throughoutSKILL.md. - Boundary markers: None identified; user input is passed directly as a string parameter.
- Capability inventory: Uses the
Bashtool to executebeltCLI commands. - Sanitization: No sanitization or filtering logic is specified within the skill markdown.
Audit Metadata