The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the installation of the belt CLI via npx and provides links to documentation and installation scripts hosted on GitHub (github.com/inference-sh). These are standard resources for the platform described.
[COMMAND_EXECUTION]: The skill instructions involve executing the belt CLI tool using the Bash tool. This is the primary intended function of the skill to interface with the remote image generation service.
[PROMPT_INJECTION]: The skill ingests user-provided text prompts for image generation. This represents an indirect prompt injection surface where malicious instructions could be embedded in data.
Ingestion points: The prompt field in the --input JSON object within the belt app run commands.
Boundary markers: The skill uses structured JSON to pass arguments to the CLI, which acts as a boundary for the input data.
Capability inventory: The skill is scoped to the Bash tool with access restricted to the belt command (belt *).
Sanitization: Input sanitization is expected to be handled by the belt CLI and the backend inference engine.

nano-banana