qwen-image-2
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration for image generation services and follows standard patterns for CLI-based tool interaction.
- [EXTERNAL_DOWNLOADS]: Fetches installation guidelines and references other skills from the official inference-sh GitHub repository and the inference.sh domain. These are the service providers for the skill's functionality and are treated as safe sources for these assets.
- [COMMAND_EXECUTION]: Uses the
beltCLI to execute image generation tasks. These commands are scoped to thealibaba/qwen-image-2application and do not attempt unauthorized file access or privilege escalation. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided prompts and image URIs.
- Ingestion points: Data enters through the
--inputJSON object in thepromptandreference_imagesfields. - Boundary markers: None identified in the provided templates.
- Capability inventory: The skill uses the
Bash(belt *)tool to run external inference apps. - Sanitization: Not explicitly mentioned; however, the skill operates as a standard wrapper for an image generation API where such inputs are expected.
Audit Metadata