text-to-speech
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the belt CLI tool and references external installation instructions. Evidence: 'npx skills add belt-sh/cli' and 'https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md'.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute CLI commands for service authentication and running AI models. Evidence: 'belt login' and 'belt app run' commands used throughout SKILL.md.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by interpolating user-provided text into shell commands. 1. Ingestion points: The text field in the JSON input for 'belt app run' (SKILL.md). 2. Boundary markers: Absent; text is directly placed within shell command strings. 3. Capability inventory: Execution of external CLI tools via Bash(belt *). 4. Sanitization: Absent; no validation or escaping of the input text is described.
Audit Metadata