qwen-image-2-pro
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool (via theBashtool) to perform operations such asbelt loginandbelt app run. These are legitimate actions for interacting with the Inference.sh inference service. - [EXTERNAL_DOWNLOADS]: The skill references external resources including the
inferenceshPython package and thebelt-sh/cliskill. It also links to installation guidelines hosted on the officialinference-shGitHub repository. These resources are consistent with the skill's stated purpose of providing an interface to the Alibaba Qwen model via Inference.sh. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided strings through the
promptparameter. While this is an ingestion point for untrusted data, the skill acts as a pass-through to an image generation API, which typically has its own internal safety filters for content generation. The risk of indirect injection affecting the agent's logic is minimal.
Audit Metadata