youtube-thumbnail-design
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing a third-party command-line tool (
belt) fromnpx skills add belt-sh/cli. It also links to external documentation onraw.githubusercontent.com/inference-sh/skillsfor installation instructions. - [COMMAND_EXECUTION]: The skill contains multiple example bash commands using the
beltCLI to generate images. These commands are descriptive and intended for image generation tasks through a specific service (inference.sh). - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions that process image generation prompts.
- Ingestion points: Prompts are manually constructed by the user based on provided templates.
- Boundary markers: None (standard prompt structure).
- Capability inventory: The skill uses
belt app runto interact with remote image generation models. - Sanitization: None required for static templates.
Audit Metadata