p-image
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
beltCLI and associated skill packages from the officialinference-shGitHub organization and NPM registry. These downloads are necessary for the skill's primary function of interacting with the inference.sh platform. - [COMMAND_EXECUTION]: The skill instructions utilize the
beltcommand-line interface to perform inference tasks. The execution environment is limited to thebelttool as defined in theallowed-toolsfrontmatter configuration. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text prompts and external image URLs to generate or modify images. This creates a potential surface for indirect prompt injection if the processed content contains instructions for the model.
- Ingestion points: User input passed via the
--inputargument in shell commands withinSKILL.md. - Boundary markers: The use of structured JSON for input parameters helps delineate data from commands.
- Capability inventory: The skill uses shell execution to invoke the
beltCLI for remote API calls. - Sanitization: Sanitization is handled by the backend inference service and the CLI tool rather than the skill instructions themselves.
Audit Metadata