generate-image
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- Data Exposure & Exfiltration (LOW): The script
scripts/generate_image.pysends user-provided text prompts and base64-encoded image data tohttps://openrouter.ai/api/v1/chat/completions. This is the primary function of the skill, but users should be aware that data is transmitted to a third-party service. - Unverifiable Dependencies (LOW): The script depends on the
requestslibrary. Whilerequestsis a standard and widely-trusted Python package, it is an external dependency not included in the standard library. The script provides instructions for manual installation viapip. - Indirect Prompt Injection (LOW): The skill acts as a pass-through for user prompts and image data to an external AI model, creating a surface for indirect prompt injection.
- Ingestion points:
promptargument and--inputfile path inscripts/generate_image.py. - Boundary markers: Absent. The text prompt is interpolated directly into the JSON payload for the API request.
- Capability inventory: Performs network POST requests to OpenRouter and writes generated image files to the local file system via
save_base64_image. - Sanitization: No sanitization or structural validation is performed on the input prompt or image data before transmission.
Audit Metadata