product-photography
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and instruction set for using the
beltCLI tool, which is owned by the skill's authoring organization. It does not perform any unauthorized file access, network exfiltration, or persistence mechanisms. - [COMMAND_EXECUTION]: The skill uses the
allowed-toolsconfiguration to restrict shell access exclusively to thebeltcommand (Bash(belt *)), implementing the principle of least privilege. - [EXTERNAL_DOWNLOADS]: The skill references an installation guide hosted on the vendor's official GitHub repository (
inference-sh/skills). This is a legitimate resource for the skill's primary purpose. - [REMOTE_CODE_EXECUTION]: While the skill suggests using
npx skills addto install a required component, this is a standard platform-level instruction for extending agent capabilities and targets the vendor's own verified package.
Audit Metadata