flux-image
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install the 'belt' CLI and additional model-specific skills from the inference.sh GitHub repository and NPM. These resources are provided by the service provider for the tool's intended functionality.- [COMMAND_EXECUTION]: The skill uses the Bash environment to execute 'belt' commands. This includes 'belt login' for session management and 'belt app run' for interacting with remote inference models.- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for ingesting user-supplied text prompts and external image URLs to generate or modify images. * Ingestion points: The '--input' argument in SKILL.md examples. * Boundary markers: Input is structured as JSON strings. * Capability inventory: Bash tool access for 'belt' CLI commands. * Sanitization: Relies on the inference.sh API for content safety.
Audit Metadata