tensorslab-image
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly accepts and downloads arbitrary external image URLs and returns/consumes URLs from the API (see scripts/tensorslab_image.py: generate_image's image_url parameter and download_image/wait_and_download) and SKILL.md documents image-url/image-to-image workflows, so untrusted public/user-generated content is ingested and used to drive generation/editing decisions.
Audit Metadata