happyhorse
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation guidelines hosted on the official inference-sh GitHub repository for the required command-line tools.
- [COMMAND_EXECUTION]: The skill utilizes the
beltcommand-line interface to interact with video generation models. This execution is restricted via theallowed-toolsconfiguration to only allowbeltcommands, which is a recommended security practice. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data by accepting image and video URLs as inputs for model inference.
- Ingestion points: External URLs for images and videos are passed as arguments to the
beltcommand inSKILL.md. - Boundary markers: Not explicitly defined in the templates, but usage is restricted to structured JSON inputs for the CLI tool.
- Capability inventory: Uses the
beltCLI for remote API interaction (inference.sh). - Sanitization: Relies on the underlying
beltCLI and the inference.sh platform to handle the provided URLs safely.
Audit Metadata