logo-design-guide
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses templates that interpolate user-provided descriptive text into shell commands for image generation.
- Ingestion points: User-defined prompt strings, subjects, and styles within the Bash examples in
SKILL.md. - Boundary markers: None; user input is placed directly inside JSON objects passed to the
beltcommand. - Capability inventory: Access to the
beltcommand via Bash, as defined in the skill'sallowed-toolsconfiguration. - Sanitization: The skill does not provide mechanisms to escape or sanitize user input before it is processed by the shell.
- [EXTERNAL_DOWNLOADS]: The skill references external installation resources and provides instructions to add related skills.
- Fetches setup documentation from the
inference-shorganization's public GitHub repository. - Recommends installing the
belt-sh/cliskill and other related skills using thenpx skills addcommand. - [COMMAND_EXECUTION]: The skill provides numerous Bash examples to run AI models via a specific CLI utility.
- The execution scope is correctly restricted using the
allowed-toolsfrontmatter to only permit thebeltcommand.
Audit Metadata