prompt-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several bash examples for executing model runs via the
beltCLI tool. - [EXTERNAL_DOWNLOADS]: The skill refers to external resources for installation and additional modules from the
inference-shGitHub repository. - [INDIRECT_PROMPT_INJECTION]: The skill provides prompt templates that interpolate untrusted user data.
- Ingestion points:
SKILL.mdexamples use--inputparameters for user content. - Boundary markers: No specific delimiters are used to wrap external content in the examples.
- Capability inventory: Shell execution capability is provided through the
beltCLI tool. - Sanitization: No sanitization of user-provided content is present in the demonstrated templates.
Audit Metadata