p-video
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external resources, including installation instructions at
raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.mdand related skills from theinference-shandbelt-shGitHub organizations. - [COMMAND_EXECUTION]: The skill executes the
beltCLI tool via Bash to interact with the inference.sh API. Access is restricted to this specific tool through theallowed-toolsfrontmatter configuration. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes user-provided prompts and external URLs (image/audio) which are then passed to the video generation models.
- Ingestion points: User input via the
prompt,image, andaudiofields in the JSON input for thebelt app runcommand. - Boundary markers: The skill uses structured JSON to pass parameters but lacks specific instructions to the agent to ignore potentially malicious content within the user-provided prompt.
- Capability inventory: The skill is capable of executing the
beltCLI tool to communicate with remote inference servers. - Sanitization: No explicit sanitization or input validation logic is present in the markdown instructions; the skill relies on the downstream CLI and service-side safety protocols.
Audit Metadata