background-removal

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with the system via the belt CLI tool. Access is restricted using the allowed-tools frontmatter to only permit Bash(belt *), preventing arbitrary shell command execution.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the belt-sh/cli via npx and references configuration files hosted on the official GitHub repository for the service provider. These are standard operations for tool setup within this ecosystem.
  • [DATA_EXFILTRATION]: Authentication is managed via the belt login command. The skill sends image URLs and text prompts to external inference providers (inference.sh and fal.ai) to perform image processing tasks, which is the intended and documented functionality of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 04:08 PM
Security Audit — agent-trust-hub — background-removal