product-hunt-launch

Pass

Audited by Gen Agent Trust Hub on Apr 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references a configuration and installation file on the vendor's GitHub repository (inference-sh/skills).
  • [COMMAND_EXECUTION]: It utilizes the infsh CLI and npx for task execution, which is consistent with the vendor's ecosystem and the skill's purpose.
  • [DATA_EXFILTRATION]: Network operations are directed at well-known services like Fal.ai, Tavily, and Exa for research and image generation.
  • [PROMPT_INJECTION]: The skill processes data from external search results, presenting a surface for indirect prompt injection; however, no evidence of malicious intent or exploitable prompt construction was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 23, 2026, 06:43 AM
Security Audit — agent-trust-hub — product-hunt-launch