ai-image-generation
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and usage examples for the inference.sh image generation service. The instructions and linked resources are consistent with the skill's intended purpose.
- [EXTERNAL_DOWNLOADS]: The skill references installation guides and secondary skill modules hosted on the service provider's official GitHub repository. These references are necessary for the platform's operation and originate from expected sources.
- [COMMAND_EXECUTION]: The skill provides example commands for the
beltCLI tool to perform text-to-image and image-to-image tasks. This tool usage is appropriate for the skill's functionality. - [PROMPT_INJECTION]: The skill processes user-provided prompts and image URLs through the
beltCLI tool, which constitutes an entry point for untrusted data into the image generation pipeline. - Ingestion points:
promptandimage_urlfields within JSON input forbelt app runcommands (SKILL.md) - Boundary markers: Tool inputs are structured within JSON objects
- Capability inventory: Shell execution limited to the
beltcommand utility (SKILL.md) - Sanitization: No explicit sanitization or input validation is performed within the skill instructions
Audit Metadata