background-removal
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions hosted on GitHub.
- Evidence: Links to
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.mdfor CLI setup instructions. - [COMMAND_EXECUTION]: The skill instructs the agent to use a specific command-line interface (
belt) for interacting with an external inference service. - Evidence: Multiple examples using
belt app runto process images. - The
allowed-toolsmetadata restricts execution to thebeltcommand, adhering to the principle of least privilege. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of image URLs provided by the user or previous workflow steps.
- Ingestion points: Image URLs passed to the
--inputargument inSKILL.md. - Capability inventory: Executes shell commands via the
beltCLI. - Boundary markers: Not explicitly present in the command strings, though the command structure is well-defined.
- Sanitization: Not explicitly detailed in the markdown instructions.
Audit Metadata