skill
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Documentation includes commands for the
beltCLI tool, which is used to manage skill lifecycles (e.g.,belt skill install,belt skill list). - [EXTERNAL_DOWNLOADS]: The skill facilitates fetching and installing content from the
beltregistry. These operations are inherent to the tool's purpose as a registry manager and interact with vendor-specific infrastructure. - [PROMPT_INJECTION]: The skill facilitates the ingestion of external data from the
beltregistry via theuseandgetcommands. This creates an attack surface for indirect prompt injection, as content from retrieved skills enters the agent's context. Evidence: Ingestion points:belt skill use,belt skill get(SKILL.md); Boundary markers: absent; Capability inventory: Bash access; Sanitization: absent.
Audit Metadata