email-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
belt-sh/clitool and references external setup documentation hosted on a third-party GitHub repository (inference-sh/skills).- [COMMAND_EXECUTION]: Employs theBashtool to runbeltcommands for account login and application execution. The tool usage is constrained to thebeltbinary via the YAML frontmatter.- [INDIRECT_PROMPT_INJECTION]: The skill defines templates that pass user-supplied HTML content into CLI arguments for image generation tools without explicit sanitization. - Ingestion points: HTML strings within the
--inputargument ofbelt app runcommands. - Boundary markers: Absent; uses standard shell argument quoting.
- Capability inventory: Invocation of external AI models via the
beltCLI andBashtool. - Sanitization: Absent; the skill does not suggest or implement escaping for the interpolated HTML.
Audit Metadata