stable-diffusion-image-generation

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill explicitly loads models, adapters, and assets from public third‑party sources (e.g., DiffusionPipeline.from_pretrained(...), ControlNetModel.from_pretrained('lllyasviel/...'), pipe.load_textual_inversion('sd-concepts-library/...') and links to the Hugging Face Model Hub/GitHub), so it ingests untrusted/user-provided content from the open web at runtime which could embed adversarial or instruction-bearing data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:02 AM