storyboard-creation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool, the official interface for theinference.shplatform. Theallowed-toolsfrontmatter field restricts the execution environment to only allowbeltcommands, representing a least-privilege security configuration. - [EXTERNAL_DOWNLOADS]: The skill references a setup guide located in the author's GitHub repository (
github.com/inference-sh/skills) and provides instructions to install thebelt-sh/clitool. These are verified vendor resources consistent with the skill's origin. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied scene descriptions for image generation. The risk is minimized by the skill's structure and the underlying safety guardrails of the inference platform.
- Ingestion points: Visual descriptions and prompt variables in
SKILL.mdused within CLI commands. - Boundary markers: Uses structured JSON (
--input '{...}') to separate prompt content from command-line arguments. - Capability inventory: Accesses remote inference APIs for image generation and performs local image stitching.
- Sanitization: Relies on the internal safety filters and content moderation of the target image generation models.
Audit Metadata