product-changelog

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'belt' CLI tool using npx skills add belt-sh/cli and references installation documentation hosted on GitHub at raw.githubusercontent.com/inference-sh/. It also suggests installing additional skills from the inference-sh repository.
  • [REMOTE_CODE_EXECUTION]: The skill uses the belt app run command to execute remote applications for image generation (falai/flux-dev-lora), browser automation (infsh/agent-browser), and image stitching (infsh/stitch-images). These are presented as utility tools for creating release note visuals.
  • [COMMAND_EXECUTION]: The skill instructions include Bash commands for logging into the platform (belt login), running apps, and listing available apps (belt app list).
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 04:34 AM
Security Audit — agent-trust-hub — product-changelog