logo-design-guide
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and instructions from the inference-sh GitHub repository.
- Evidence: Links to
cli-install.mdandnpx skills addcommands targeting the inference-sh namespace inSKILL.md. - [COMMAND_EXECUTION]: Uses the allowed
beltCLI tool to perform image generation tasks. - Evidence: Multiple
belt app runcalls withinSKILL.mdfor generating logo concepts and upscaling images. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that interpolates potentially untrusted user input into command parameters.
- Ingestion points: User-provided prompts within the JSON
--inputforbelt app runcalls inSKILL.md. - Boundary markers: None.
- Capability inventory: Subprocess execution of the
beltCLI tool inSKILL.md. - Sanitization: None.
Audit Metadata