Skills
Navigate
skills/agiseek/agent-skills/libvips-image/Gen Agent Trust Hub

libvips-image

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the uv package manager installer from astral.sh and official libvips binaries from GitHub's release infrastructure.
  • [REMOTE_CODE_EXECUTION]: The installation scripts (install.sh and install.ps1) execute configuration code fetched from astral.sh to set up the uv environment.
  • [COMMAND_EXECUTION]: The validation suite in scripts/test_vips_tool.py uses subprocess.run to execute the skill's own CLI tools for functional verification.
  • [PRIVILEGE_ESCALATION]: scripts/install.sh uses sudo to install necessary system-level image libraries through standard Linux package managers like apt, dnf, and pacman.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes external image data.
  • Ingestion points: Filesystem images loaded via pyvips.Image.new_from_file in vips_tool.py and vips_batch.py.
  • Boundary markers: None identified.
  • Capability inventory: Performs filesystem read/write operations and utilizes subprocesses for testing.
  • Sanitization: Relies on the security and validation logic provided by the underlying libvips library.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:30 PM