seo-images
Warn
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple system binaries including
exiftool,cwebp,convert(ImageMagick), andffmpegto process image files. The/seo images optimize <path>command accepts a path argument which is used directly in shell commands. - [PRIVILEGE_ESCALATION]: Instructions include the use of
sudo apt installto install system dependencies (libimage-exiftool-perlandwebp), which requires administrative access to the host system. - [EXTERNAL_DOWNLOADS]: The skill relies on and recommends the installation of external software packages from system repositories to perform its primary functions.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8).
- Ingestion points: The skill fetches images from external URLs and reads image metadata (IPTC, XMP, EXIF) via
exiftoolinSKILL.md. - Boundary markers: There are no specific delimiters or instructions to ignore embedded content within the metadata results.
- Capability inventory: The skill possesses extensive local execution capabilities including
exiftool,cwebp,convert, andffmpegas documented inSKILL.md. - Sanitization: No evidence of sanitization or validation of the metadata content before it is processed by the agent.
Audit Metadata