ai-image-generation
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
infshCLI tool for all core functions, including logging in and running inference models. Theallowed-toolsheader correctly limits the agent's scope to this specific utility using theBash(infsh *)pattern.- [EXTERNAL_DOWNLOADS]: The skill points to external resources for installation and enhancement, specifically fetching instructions fromraw.githubusercontent.com/inference-sh/skillsand utilizingnpxto install additional skill packages. These resources are part of the platform's official distribution channel.- [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection, as it processes user-supplied text for thepromptargument in various image generation models without implementing explicit sanitization or boundary delimiters. - Ingestion points: The
--inputargument in theinfsh app runcommands found inSKILL.md. - Boundary markers: Absent; user inputs are directly included in the JSON payloads.
- Capability inventory: The
infshtool performs network operations and likely writes resulting image data to the local file system. - Sanitization: No sanitization or escaping mechanisms are described or implemented in the provided instructions.
Audit Metadata