product-photography

Pass

Audited by Gen Agent Trust Hub on Nov 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a documentation and instruction set for using the belt CLI tool, which is owned by the skill's authoring organization. It does not perform any unauthorized file access, network exfiltration, or persistence mechanisms.
  • [COMMAND_EXECUTION]: The skill uses the allowed-tools configuration to restrict shell access exclusively to the belt command (Bash(belt *)), implementing the principle of least privilege.
  • [EXTERNAL_DOWNLOADS]: The skill references an installation guide hosted on the vendor's official GitHub repository (inference-sh/skills). This is a legitimate resource for the skill's primary purpose.
  • [REMOTE_CODE_EXECUTION]: While the skill suggests using npx skills add to install a required component, this is a standard platform-level instruction for extending agent capabilities and targets the vendor's own verified package.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 14, 2026, 12:21 PM