midjourney-image
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions and tools process user-supplied input strings for image and video generation tasks, creating a potential surface for indirect prompt injection.
- Ingestion points: The
promptparameter used in generation tasks (e.g., imagine, edit, blend, videos) across theSKILL.mdexamples and MCP tool definitions. - Boundary markers: The skill does not specify explicit boundary markers or delimiters to separate untrusted prompt data from agent instructions.
- Capability inventory: The skill utilizes network operations via
curlto interact with external API endpoints and provides access to several Midjourney-related MCP tools. - Sanitization: No explicit sanitization or filtering of user prompts is described in the skill configuration.
- [EXTERNAL_DOWNLOADS]: The skill documentation describes the installation of software packages and interaction with remote services managed by the author.
- References the installation of the
@acedatacloud/midjourneyandmcp-midjourneypackages. - Interacts with the
api.acedata.cloudAPI and a hosted MCP server atmidjourney.mcp.acedata.cloudfor image and video processing tasks.
Audit Metadata