image-evaluation
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
evaluate_image.pyscript fetches pre-trained model weights from official repositories for evaluation purposes. Specifically, it downloads theopenai/clip-vit-base-patch32andSalesforce/blip2-opt-2.7bmodels using thetransformerslibrary, which is standard practice for ML evaluation skills. - [COMMAND_EXECUTION]: The skill includes a Python script designed for local execution by the user to analyze image quality. The script uses
argparseto handle user-supplied paths and prompts safely, and it performs all heavy computation locally using libraries liketorchandopencv-python-headless. - [DATA_EXFILTRATION]: Analysis of the source code confirms that images are processed locally. Images are read from the filesystem and converted to base64 strings only for the purpose of embedding them into a local HTML report. No network calls are made to send this data to external servers.
- [PROMPT_INJECTION]: The skill handles user-supplied prompts which are then interpolated into model queries and an HTML report. The script includes a dedicated
_escapefunction that sanitizes characters like<,>, and&, effectively mitigating risks of Cross-Site Scripting (XSS) or indirect injection within the generated evaluation report.
Audit Metadata