stable-diffusion-image-generation
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly loads models, adapters, and assets from public third‑party sources (e.g., DiffusionPipeline.from_pretrained(...), ControlNetModel.from_pretrained('lllyasviel/...'), pipe.load_textual_inversion('sd-concepts-library/...') and links to the Hugging Face Model Hub/GitHub), so it ingests untrusted/user-provided content from the open web at runtime which could embed adversarial or instruction-bearing data.
Audit Metadata