superimg
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
superimgCLI for project initialization (init), rendering (render), and environment setup (setup). The instructions include a specific safety guideline for the AI to avoid overriding default output paths unless requested by the user. - [EXTERNAL_DOWNLOADS]: The framework allows loading external resources such as Google Fonts and CSS stylesheets through the
config.fontsandconfig.stylesheetsoptions. These are standard features for web-based rendering engines. - [INDIRECT_PROMPT_INJECTION]: The
renderfunction in the templates interpolates data from thectx.dataobject into HTML strings. While this is the primary mechanism for dynamic content, it represents an injection surface if the input data is provided by an untrusted source. However, in the context of video rendering, the risk is localized to the rendering environment. - [PROMPT_INJECTION]: No evidence of malicious prompt injection or behavior override attempts was found in the instructions.
Audit Metadata