p-image
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and installation guides hosted on the official GitHub repository for inference-sh. These resources are directly related to the skill's primary function of interfacing with the platform.
- [COMMAND_EXECUTION]: The skill executes
beltCLI commands through the Bash tool. Theallowed-toolsfrontmatter field restricts the execution scope to only commands starting withbelt, adhering to the principle of least privilege. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for processing user-supplied image prompts and URLs.
- Ingestion points: The
--inputJSON payload inbelt app runcommands (SKILL.md). - Boundary markers: User input is encapsulated within structured JSON strings to separate it from command-line arguments.
- Capability inventory: Command execution is strictly limited to the
beltapplication namespace. - Sanitization: The skill relies on the inference platform's underlying model guardrails for input safety.
Audit Metadata