flux-image
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation instructions and CLI configuration from the official inference.sh GitHub repository.
- [COMMAND_EXECUTION]: Utilizes the
beltcommand-line interface to interact with remote FLUX models for image generation and fine-tuning. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge for user-provided prompts that are sent to an external model inference service.
- Ingestion points:
promptandimage_urlfields within JSON payloads for thebeltCLI (SKILL.md). - Boundary markers: Inputs are structured within JSON command arguments.
- Capability inventory: Shell execution of the
beltutility via Bash. - Sanitization: No local sanitization is performed on prompts; the skill relies on the safety filters of the destination AI models.
Audit Metadata