youtube-thumbnail-design

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing a third-party command-line tool (belt) from npx skills add belt-sh/cli. It also links to external documentation on raw.githubusercontent.com/inference-sh/skills for installation instructions.
  • [COMMAND_EXECUTION]: The skill contains multiple example bash commands using the belt CLI to generate images. These commands are descriptive and intended for image generation tasks through a specific service (inference.sh).
  • [INDIRECT_PROMPT_INJECTION]: The skill includes instructions that process image generation prompts.
  • Ingestion points: Prompts are manually constructed by the user based on provided templates.
  • Boundary markers: None (standard prompt structure).
  • Capability inventory: The skill uses belt app run to interact with remote image generation models.
  • Sanitization: None required for static templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:19 PM
Security Audit — agent-trust-hub — youtube-thumbnail-design