p-image
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external installation guides and supplementary skills hosted on the official GitHub repository for the inference.sh platform.
- [COMMAND_EXECUTION]: The skill uses the
beltCLI tool to authenticate and run remote AI models; this tool usage is explicitly scoped in the skill's allowed-tools configuration. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: User-provided strings (prompts) are passed to the
belttool via the--inputflag in the shell command examples. - Boundary markers: No explicit delimiters or safety instructions regarding untrusted data are present in the provided documentation.
- Capability inventory: The skill's capabilities are limited to executing the
beltCLI tool via Bash. - Sanitization: The skill relies on the remote inference.sh API to perform sanitization and safety filtering of user-generated prompts.
Audit Metadata