image-crop-rotate

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or behaviors detected. The skill implements standard image processing using the trusted Pillow library.
  • [COMMAND_EXECUTION]: The skill executes a local Python script to perform image manipulation. This execution is limited to processing local files with specified arguments.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes user-uploaded image files. 1. Ingestion point: /mnt/user-data/uploads/. 2. Boundary markers: Absent. 3. Capability inventory: Subprocess execution of a local Python script. 4. Sanitization: Path validation and image format parsing using the Pillow library.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 02:28 AM