p-image
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
beltCLI and associated components from official repositories hosted by the service provider on GitHub. - [COMMAND_EXECUTION]: Utilizes the
beltCLI tool to perform authentication and execute inference tasks with various AI models. - [INDIRECT_PROMPT_INJECTION]: Ingests user-provided text prompts and external image URLs as inputs for model execution. The risk is mitigated by passing these inputs through a structured JSON schema to the underlying CLI tool.
- Ingestion points:
inputJSON object inbelt app runcommands (SKILL.md) - Boundary markers: Inputs are encapsulated within a JSON string structure
- Capability inventory:
Bash(belt *)tool for CLI interactions (SKILL.md) - Sanitization: Input processing and validation are delegated to the
beltCLI utility
Audit Metadata