product-photography
Warn
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches setup instructions and configuration guidelines from a remote GitHub repository (
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md). - [REMOTE_CODE_EXECUTION]: The skill recommends installing a third-party package (
belt-sh/cli) using thenpxcommand, which results in the download and execution of external code not managed by the skill itself. - [COMMAND_EXECUTION]: The skill relies on the execution of the
beltCLI tool to perform core functions, including user authentication (belt login) and remote execution of AI models (belt app run), which interacts with external infrastructure.
Audit Metadata