talking-head-production
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a link to installation instructions hosted on the vendor's official GitHub repository.
- [COMMAND_EXECUTION]: The skill provides several examples of shell commands using the vendor's CLI tool to interact with AI models.
- [PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection as it processes user-provided text prompts for speech synthesis and image generation.
- Ingestion points: User-provided text prompts in
belt app runcommands (e.g., in SKILL.md). - Boundary markers: None present in the provided examples.
- Capability inventory: The skill uses the
Bash(belt *)tool to execute model inference. - Sanitization: No explicit sanitization or validation of input prompts is documented.
Audit Metadata