image-upscaling
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshcommand-line tool to run remote image processing applications (e.g., Real-ESRGAN, Topaz). These executions are restricted to the inference.sh ecosystem and are required for the skill's core functionality. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it processes untrusted external data in the form of image URLs.
- Ingestion points: The
image_urlparameter used ininfsh app runcommands withinSKILL.md. - Boundary markers: Absent; the URL is passed directly as part of a JSON input string.
- Capability inventory: The skill has the capability to execute bash commands via the
infshtool as defined in theallowed-toolsmetadata. - Sanitization: No specific sanitization or validation of the URL or the image content is performed within the skill definition, relying instead on the remote application's internal safeguards.
Audit Metadata