📦
Historial de auditorías
app-store-screenshots - 5 auditorías
Comparación de versiones
Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.
| Versión | Fecha | Resultado | Elementos de revisión | Cambio vs anterior |
|---|---|---|---|---|
| v5 Más reciente | 9 jul 2026, 11:38 | 1 confirmado | 9 | Sin cambios de capacidad |
| v4 | 9 jul 2026, 11:38 | 1 confirmado | 9 | Sin cambios de capacidad |
| v3 | 5 jul 2026, 16:13 | Sin hallazgos confirmados | 11 | Sin cambios de capacidad |
| v2 | 5 jul 2026, 16:13 | Sin hallazgos confirmados | 11 | Sin cambios de capacidad |
| v1 | 3 jul 2026, 13:12 | 1 confirmado | 11 | Base |
Versión de auditoría 5 Más reciente
9 jul 2026, 11:38
Most static command hits are Markdown fences, inline CLI names, or documentation examples rather than dynamic shell execution. Confirmed risks are limited to third-party CLI installation guidance, belt commands that call external generation services, and remote processing of prompts or app imagery.
1
Archivos escaneados
271
Líneas analizadas
12
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Medio
Third-Party Asset Processing Through belt
The skill directs users to create screenshots and videos through the inference.sh belt CLI. Prompts and referenced app images may be processed by an external service, so private app assets need explicit user approval.
The documentation explicitly depends on inference.sh and shows belt app run commands for remote image, stitching, and video generation. The risk is privacy exposure, not evidence of malicious intent.
Elementos de revisión de capacidades (9)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line recommends running npx to install a third-party CLI skill. That can download and execute external package code during setup, so it is a real supply-chain risk.
Medio
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 apariciones
```bash
The fenced example runs belt login and belt app run against a remote model service. The arguments are static, but execution requires authentication and sends prompt data to an external CLI.
Bajo
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The line links to mutable raw GitHub install instructions for a required external CLI. This is a low-severity supply-chain concern because users may follow unaudited setup content.
Factores de riesgo
⚙️ Comandos externos (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 Acceso a red (2)
Auditado por: codex
9 jul 2026, 11:38
Most static command hits are Markdown fences, inline CLI names, or documentation examples rather than dynamic shell execution. Confirmed risks are limited to third-party CLI installation guidance, belt commands that call external generation services, and remote processing of prompts or app imagery.
1
Archivos escaneados
271
Líneas analizadas
12
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Medio
Third-Party Asset Processing Through belt
The skill directs users to create screenshots and videos through the inference.sh belt CLI. Prompts and referenced app images may be processed by an external service, so private app assets need explicit user approval.
The documentation explicitly depends on inference.sh and shows belt app run commands for remote image, stitching, and video generation. The risk is privacy exposure, not evidence of malicious intent.
Elementos de revisión de capacidades (9)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line recommends running npx to install a third-party CLI skill. That can download and execute external package code during setup, so it is a real supply-chain risk.
Medio
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 apariciones
```bash
The fenced example runs belt login and belt app run against a remote model service. The arguments are static, but execution requires authentication and sends prompt data to an external CLI.
Bajo
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The line links to mutable raw GitHub install instructions for a required external CLI. This is a low-severity supply-chain concern because users may follow unaudited setup content.
Factores de riesgo
⚙️ Comandos externos (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 Acceso a red (2)
Auditado por: codex
5 jul 2026, 16:13
Several static detections are real low-to-medium risks because the skill asks users to install and run the third-party belt CLI. The remaining detections are Markdown fences, diagrams, or metadata false positives; no prompt injection or covert exfiltration intent was found.
1
Archivos escaneados
271
Líneas analizadas
13
Elementos de revisión
0
Falsos positivos ignorados
Elementos de revisión de capacidades (11)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The inline command asks users to run npx skills add belt-sh/cli, which installs an external skill through a package runner. It is not automatic execution, but it creates a real supply-chain risk if followed.
Medio
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 apariciones
```bash
The quick-start bash block instructs belt login and belt app run, which launch a third-party CLI and remote model call. The command family is constrained, but it still executes external tooling.
Medio
Ruby/shell backtick execution
```
The section includes a belt app store command after the fenced block. It is a documented CLI action, not automatic execution, but it invokes third-party tooling.
Bajo
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
The skill explicitly depends on the inference.sh network service for screenshot and video generation. This is expected, but users should know prompt and asset data may leave their environment.
Bajo
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The install instructions use a raw GitHub URL from an external repository. It is a normal documentation link, but it is still a third-party network dependency.
Factores de riesgo
⚙️ Comandos externos (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 Acceso a red (2)
Auditado por: codex
5 jul 2026, 16:13
Several static detections are real low-to-medium risks because the skill asks users to install and run the third-party belt CLI. The remaining detections are Markdown fences, diagrams, or metadata false positives; no prompt injection or covert exfiltration intent was found.
1
Archivos escaneados
271
Líneas analizadas
13
Elementos de revisión
0
Falsos positivos ignorados
Elementos de revisión de capacidades (11)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The inline command asks users to run npx skills add belt-sh/cli, which installs an external skill through a package runner. It is not automatic execution, but it creates a real supply-chain risk if followed.
Medio
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 apariciones
```bash
The quick-start bash block instructs belt login and belt app run, which launch a third-party CLI and remote model call. The command family is constrained, but it still executes external tooling.
Medio
Ruby/shell backtick execution
```
The section includes a belt app store command after the fenced block. It is a documented CLI action, not automatic execution, but it invokes third-party tooling.
Bajo
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
The skill explicitly depends on the inference.sh network service for screenshot and video generation. This is expected, but users should know prompt and asset data may leave their environment.
Bajo
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The install instructions use a raw GitHub URL from an external repository. It is a normal documentation link, but it is still a third-party network dependency.
Factores de riesgo
⚙️ Comandos externos (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 Acceso a red (2)
Auditado por: codex
3 jul 2026, 13:12
The skill is a design guide, but it directs users and agents to install and run external CLI commands. Most static hits are markdown false positives; confirmed risks relate to npx installs, belt remote inference calls, and possible upload of app assets.
1
Archivos escaneados
271
Líneas analizadas
14
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Medio
Remote Processing of App Assets
The skill guides users to send prompts and screenshot image filenames through the belt CLI to remote generation or stitching services. Proprietary app screens or unreleased UI assets could be exposed if users run these commands without reviewing data handling.
The examples directly invoke remote model apps and one example references local screenshot filenames. The risk depends on what the user supplies, so confidence is high for privacy exposure but not malicious intent.
Elementos de revisión de capacidades (11)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Line 7 instructs users to run an npx skill installation command. That is a real external command and a supply-chain risk if executed without verification.
Medio
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 apariciones
```bash
Lines 17-26 contain bash examples for belt login and belt app run. These commands invoke an external CLI and send prompt data to a remote inference service.
Medio
Ruby/shell backtick execution
```
Line 269 tells users to run belt app store. This is a real external CLI command, although it appears to browse available applications rather than process user data.
Bajo
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
Line 11 names inference.sh as the service used to create screenshots and videos. This is a legitimate hardcoded external service dependency that should be disclosed.
Bajo
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
Line 15 links to raw GitHub installation instructions for the required CLI. This is an external network dependency and unpinned remote documentation risk.
Factores de riesgo
⚙️ Comandos externos (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 Acceso a red (2)
Auditado por: codex