image-upscaling
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an installation guide hosted on the inference-sh GitHub repository (https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md). This is documented neutrally as a standard setup procedure for the vendor's tool.
- [COMMAND_EXECUTION]: Instructs the user to run
belt loginandbelt app runcommands to interact with the upscaling service. These commands are part of the intended functionality and are restricted to thebeltCLI tool via the skill's tool definitions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided image URLs which are passed to the
beltCLI. - Ingestion points: The
image_urlfield within the JSON input for thebelt app runcommand (SKILL.md). - Boundary markers: No explicit boundary markers or safety instructions for the agent regarding external input were found in the skill text.
- Capability inventory: The skill uses the
Bash(belt *)tool to execute commands, including those that process the external URLs (SKILL.md). - Sanitization: Input validation is not performed within the skill instructions, relying on the underlying
belttool and inference.sh backend.
Audit Metadata