higgsfield-product-photoshoot
Fail
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses a highly insecure installation pattern in its bootstrap section. It downloads a script from
https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.shand pipes it directly into the shell (| sh). This provides no mechanism for verification and allows the remote script to execute arbitrary commands with the user's privileges. - [COMMAND_EXECUTION]: The skill constructs and executes Bash commands that incorporate user-provided prompts and local file paths. Specifically, the
higgsfield product-photoshoot createcommand uses unvalidated strings from the interview process, which could be manipulated to perform command injection if the input contains shell metacharacters. - [DATA_EXFILTRATION]: The skill is designed to interact with the local filesystem to retrieve image files and automatically upload them to an external backend service. This functionality involves the transmission of local assets to a remote infrastructure.
- [EXTERNAL_DOWNLOADS]: The skill initiates a download from a third-party GitHub repository to acquire its required CLI tool. This bypasses system package managers and introduces a dependency on an external, unverified source.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata