video-prompting-guide
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions hosted on GitHub (
raw.githubusercontent.com/inference-sh/skills) and suggests installing thebelt-sh/cliand related skills vianpx. These resources are linked to the official ecosystem of the tool described. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates constructing shell commands (
belt app run) using JSON payloads that include user-defined prompts. If these commands are executed with untrusted data without proper sanitization, they could be susceptible to indirect prompt injection within the target AI model's context. - Ingestion points: Prompt field within the JSON input for the
beltcommand. - Boundary markers: None explicitly defined in the examples.
- Capability inventory: Network communication with the inference.sh API via the
belttool. - Sanitization: Not present in the demonstrated command templates.
Audit Metadata