gpt-image
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
beltCLI tool and references configuration files from theinference-shGitHub repository. These resources trace back to the official infrastructure of the service provider described in the skill. - [COMMAND_EXECUTION]: The skill interacts with the inference platform using the
beltcommand-line utility. The execution environment is restricted via theallowed-toolsfield to only permit thebeltcommand, which adheres to the principle of least privilege and prevents arbitrary shell execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests natural language prompts and image URLs provided by the user to facilitate image generation.
- Ingestion points: The
prompt,images, andmaskparameters within the tool's JSON input. - Boundary markers: External data is encapsulated within a structured JSON object passed to the CLI tool.
- Capability inventory: The skill's capabilities are confined to the specific operations supported by the
beltapplication. - Sanitization: Inputs are treated as data parameters for the remote image generation model.
Audit Metadata