p-image
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of external components, specifically the
beltCLI (npx skills add belt-sh/cli) and other related skills from theinference-shorganization. These resources are from a well-known service provider and are necessary for the skill's intended functionality. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executebeltcommands to run AI models on a remote infrastructure. These commands includebelt loginfor authentication andbelt app runfor initiating image generation tasks. - [PROMPT_INJECTION]: The skill processes user-supplied text prompts and image URLs through the
beltCLI. While this represents a surface for indirect prompt injection (where instructions could be hidden in external images or prompts), this is a standard aspect of generative AI tools and is handled here through structured JSON inputs.
Audit Metadata