p-video-avatar
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool (Bash(belt *)) to interact with the inference.sh platform. This execution is limited to the vendor's specific application runner and is necessary for the skill's primary function. - [EXTERNAL_DOWNLOADS]: The documentation points to installation scripts and related skills hosted on official GitHub repositories belonging to the vendor (
inference-shandbelt-sh). These are recognized vendor resources and do not escalate the security risk. - [PROMPT_INJECTION]: The skill defines parameters such as
voice_script,video_prompt, andvoice_promptwhich interpolate user-supplied text into prompts for the generative model. Additionally, it includes adisable_safety_filterparameter. While these create an interface that could be used for prompt injection against the remote model, they are documented features of the API rather than attempts to bypass the agent's internal safety protocols.
Audit Metadata