llm-models
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to download and install the
beltCLI tool and individual AI applications from theinference-shorganization on GitHub, which is the official source for this service. - [REMOTE_CODE_EXECUTION]: Uses
npxand thebeltCLI'sapp runcommand to fetch and execute remote code logic for interacting with language models. - [COMMAND_EXECUTION]: Relies on the Bash tool to execute CLI commands for authentication, model selection, and prompt execution.
- [INDIRECT_PROMPT_INJECTION]: The core functionality involves ingesting user-provided prompts and sending them to external models. This represents an inherent indirect prompt injection surface where unvalidated data is processed by the AI system.
Audit Metadata