logo-surface-board
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to prompt the user to install external functional extensions using npx skills add for higgsfield-ai/skills and stablyai/orca if they are not already available.
- [REMOTE_CODE_EXECUTION]: Installing external skills via npx involves downloading and executing code from remote repositories like higgsfield-ai/skills and stablyai/orca.
- [COMMAND_EXECUTION]: The procedure makes extensive use of CLI tools for image processing and server management, including magick, rsvg-convert, python3 -m http.server to host the logo board locally, and git for repository operations.
- [DYNAMIC_EXECUTION]: The skill uses browser-based code evaluation via orca eval to programmatically verify the content and integrity of the generated HTML board.
- [INDIRECT_PROMPT_INJECTION]: The skill processes SVG files generated by third-party AI models, which are subsequently rendered in a web browser. (1) Ingestion points: SVG source code generated by models like Recraft or Higgsfield is read and modified in SKILL.md (Steps 2, 3, and 4). (2) Boundary markers: The process uses regex pattern matching for specific attribute repairs but does not utilize formal delimiters to isolate the untrusted SVG data. (3) Capability inventory: Includes image rasterization, local file serving, browser evaluation, and Git push operations. (4) Sanitization: The skill identifies and removes metadata tags and specific background paths from the SVG source to prepare it for rendering.
Audit Metadata