background-removal

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references external installation instructions and adds CLI dependencies from the inference-sh and belt-sh repositories. These references are used to set up the necessary environment for the belt CLI tool.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for passing image URLs and user prompts to the belt CLI tool for processing.\n
  • Ingestion points: image_url and prompt parameters in the belt app run examples in SKILL.md.\n
  • Boundary markers: None explicitly used in the command examples.\n
  • Capability inventory: The skill allows execution of the belt CLI tool via the restricted Bash tool.\n
  • Sanitization: The skill relies on the external CLI and platform for input validation and sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:26 AM