ai-image-generation
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of the
infshCLI for AI image generation. The execution environment is appropriately restricted via theallowed-toolsconfiguration, which limits shell access specifically to theinfshcommand set. - [EXTERNAL_DOWNLOADS]: The documentation provides links to installation scripts and related resources hosted on the vendor's official GitHub repository (
github.com/inference-sh/skills). These are standard operational resources for the service. - [PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by interpolating user-provided prompts into CLI command arguments.
- Ingestion points: User-supplied prompt strings used in the
infsh app runcommands. - Boundary markers: Prompts are contained within JSON-formatted strings passed as command-line arguments.
- Capability inventory: The
infshtool performs network requests to external APIs to process images. - Sanitization: No explicit sanitization or input validation is specified within the instructions; the skill relies on the underlying platform's handling of command-line arguments.
Audit Metadata