product-photography

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to interface with the belt CLI for image generation tasks (e.g., belt app run bytedance/seedream-4-5). Execution is restricted in the YAML frontmatter to only allow commands starting with belt, which adheres to the principle of least privilege.
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the belt-sh/cli using npx and references installation scripts hosted on GitHub (raw.githubusercontent.com/inference-sh/skills/). These resources originate from the official service provider for the skill's functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:39 PM
Security Audit — agent-trust-hub — product-photography