prompt-engineering
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
belt-sh/clivianpxand provides links to installation documentation on GitHub (inference-sh/skills). These are standard procedures for utilizing the inference.sh platform described in the guide. - [COMMAND_EXECUTION]: The
allowed-toolsconfiguration permits the use of thebeltCLI tool. The skill body contains numerous examples ofbeltcommands used to run inference on LLM, image, and video models. These examples serve educational purposes and align with the skill's stated goal of teaching prompt engineering. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing external data, such as code reviews and article summaries. While this represents a surface for indirect prompt injection (where instructions hidden in the data might influence the model), the skill correctly demonstrates the use of clear delimiters (e.g.,
Code:,Reviews:) and role-based constraints to mitigate these risks. As a guide, it does not programmatically handle untrusted input. - Ingestion points: User-provided content passed to model prompts via the
--inputflag in shell examples. - Boundary markers: Examples demonstrate using headers and brackets (e.g.,
[article text],Reviews:) to separate instructions from data. - Capability inventory: The skill utilizes the
beltCLI to send data to remote AI inference APIs. - Sanitization: The guide teaches users how to structure prompts to avoid confusion between instructions and data, though it does not provide automated sanitization scripts.
Audit Metadata