Skills
Navigate
skills/inference-sh/skills/product-hunt-launch/Gen Agent Trust Hub

product-hunt-launch

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external web searches (Tavily and Exa) which may contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: Search results processed from belt app run tavily/search-assistant and belt app run exa/search in SKILL.md.
  • Boundary markers: No delimiters or explicit warnings are used to prevent the agent from following instructions embedded in the search results.
  • Capability inventory: The skill can execute shell commands via the belt CLI to generate images and perform additional searches.
  • Sanitization: No sanitization, escaping, or validation of the search result content is documented.
  • [COMMAND_EXECUTION]: Uses the vendor-provided belt CLI to run remote AI applications for image generation and competitive research.
  • [EXTERNAL_DOWNLOADS]: References installation guidelines hosted on the vendor's official GitHub repository (inference-sh/skills).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:24 AM