media-upload
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local shell scripts to perform its primary functionality.
- Evidence: It executes
gh-upload-media.shandgh-upload-dir.shlocated within the plugin's internalscripts/directory. - [EXTERNAL_DOWNLOADS]: The skill transmits media data to external GitHub repositories.
- Evidence: Uploads are directed to the vendor-owned repository
ArcBlock/loop-agent-assetsand potentially togithub.com/user-attachments/assets/as a fallback mechanism. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its handling of external files and directory structures.
- Ingestion points: The skill accepts
<dir>and<file>paths from the user to identify content for uploading. - Boundary markers: The instructions do not define explicit delimiters or warnings to prevent the agent from being influenced by metadata or content within the processed files.
- Capability inventory: The skill uses
bashto run scripts that have full read access to the local filesystem and network access via theghCLI andgitprotocols. - Sanitization: Basic file extension validation is performed to ensure only media types (e.g., .png, .jpg, .webm) are processed.
Audit Metadata