ai-video-generation
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executebeltcommands for logging in, listing available AI models, and running video generation tasks. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill references and encourages the installation of external components, including the
beltCLI tool (npx skills add belt-sh/cli) and additional model-specific skills from theinference-shGitHub repository. These dependencies are consistent with the primary purpose of the skill. - [DATA_EXPOSURE_AND_EXFILTRATION]: Execution of
belt app runcommands involves sending user-provided prompts and media URLs to theinference.shAPI for processing. This is the intended functionality of the service. - [INDIRECT_PROMPT_INJECTION]: The skill processes external media via URLs (images, audio, video) which are passed to AI models, creating a potential surface for indirect prompt injection.
- Ingestion points: Media URLs provided in the
--inputargument ofbelt app runcommands inSKILL.md. - Boundary markers: None explicitly defined in the CLI command structure for external data.
- Capability inventory: Uses
Bash(belt *)to execute remote AI inference. - Sanitization: Not explicitly defined within the skill; relies on the underlying
beltCLI tool and the model provider's safety filters.
Audit Metadata