happyhorse
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation guides and documentation from the
inference.shGitHub repository and domain. These are standard references for configuring the required environment for the skill's functionality. - [COMMAND_EXECUTION]: The skill leverages the
beltCLI via theBashtool to interact with the inference service. Theallowed-toolsconfiguration appropriately limits the tool's scope to thebeltcommand. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input, such as text prompts and media URLs, which are interpolated into CLI commands for video processing.
- Ingestion points: User-provided prompts, image URLs, and video URLs (SKILL.md).
- Boundary markers: None explicitly present in the prompt templates.
- Capability inventory:
Bash(belt *)tool access (SKILL.md). - Sanitization: The skill relies on the
beltCLI and the downstream AI model's safety guardrails to handle potentially malicious inputs.
Audit Metadata