customer-persona

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides examples of using the belt CLI tool via Bash to execute market research and image generation tasks. These commands interact with the vendor's application ecosystem (e.g., search assistants and image generators).
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of an external component, belt-sh/cli, and provides a link to installation guidelines hosted on the vendor's official GitHub repository (inference-sh/skills).
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external search results, which is a common pattern for research-oriented tools.
  • Ingestion points: Data enters the agent context through the output of external search tools (tavily/search-assistant and exa/search) as described in the research steps of SKILL.md.
  • Boundary markers: The provided command examples do not include explicit delimiting instructions to ignore potentially malicious content embedded in the search results.
  • Capability inventory: The skill uses Bash(belt *) for command execution and image generation.
  • Sanitization: There is no specific description of automated sanitization or filtering of the content retrieved from external search providers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:24 AM