OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Aug 8, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates the installation and use of the belt CLI from inference.sh. It recommends a piped-to-shell installation method, which is a high-risk remote code execution pattern. Additionally, the CLI's feature of automatically uploading local files specified in input arguments presents a risk for data exfiltration if manipulated via indirect prompt injection.
Detected behaviors
1 alert: gptSecurity
3 issues