cyberpunk-design

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references external resources from non-trusted domains to define its design rules and visual logic.
  • Evidence: Multiple links to a personal GitHub repository (github.com/freestylefly/awesome-gpt-image-2) are included in references/cinematic-image-direction.md as sources for visual case adaptations.
  • Evidence: Links to specific video IDs on Douyin (e.g., douyin.com/video/7661966023750405382) are listed in references/SOURCE-LEDGER.md as sources for lighting and scene scheduling methods.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data which is then interpolated into complex prompt templates, creating a vulnerability to indirect injection.
  • Ingestion points: The skill explicitly mentions using "user-supplied images" (10 reference images) as the basis for the "cinematic image direction" and "source ledger" (found in references/SOURCE-LEDGER.md and references/cinematic-image-direction.md).
  • Boundary markers: While the skill uses structured 10-section formatting, it lacks clear boundary markers or instructions to the agent to ignore any text-based instructions potentially embedded in the source images or descriptions.
  • Capability inventory: The skill generates a comprehensive style_route containing camera, space, action, and material parameters used to drive downstream AI image and video generation tools.
  • Sanitization: No sanitization, filtering, or validation steps are defined for the data extracted from the reference images or user descriptions before they are used to populate the design templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:18 AM