product-hunt-launch
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
belt-sh/clipackage via npx and references documentation hosted on theinference-shGitHub repository. These are standard setup procedures for the tools required by the skill. - [COMMAND_EXECUTION]: The skill uses the
beltCLI tool to run specific applications for image generation (falai/flux-dev-lora, infsh/stitch-images) and web searching (tavily/search-assistant, exa/search). These commands are used for their intended purpose of creating launch assets and performing research. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes search tools that ingest external web data. While this creates a surface for indirect prompt injection, it is the primary intended function for market research, and the skill does not grant excessive privileges or perform dangerous operations with the retrieved data.
Audit Metadata