flux-image
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and installation scripts located in the official GitHub repository for the inference-sh service. These are standard resources for the platform's users.
- [COMMAND_EXECUTION]: The skill utilizes the belt CLI tool, which is the official client for inference.sh, to perform image generation, model listing, and account login operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input in the form of text prompts and image URLs which are passed as arguments to the inference CLI. As this is the core functionality for an image generation agent, the attack surface is expected and controlled by the CLI tool's logic.
Audit Metadata