favicon
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- COMMAND_EXECUTION (LOW): The skill utilizes the Bash tool to execute magick, cp, and mkdir. While it uses shell quoting for the input variable ($1), this remains a surface for potential command injection if the agent's shell execution environment is vulnerable to specific character sequences.
- PROMPT_INJECTION (LOW): This skill contains an indirect prompt injection surface. (1) Ingestion points: User-provided image path ($1) and various project configuration files (e.g., package.json, config/routes.rb). (2) Boundary markers: Absent. (3) Capability inventory: File writing (cp), image processing (magick), and directory creation (mkdir). (4) Sanitization: Performs a basic file extension check for supported image formats.
Audit Metadata