baoyu-article-illustrator
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied articles and reference images to generate prompts and analysis files. There is a risk that malicious instructions embedded in these articles could influence the agent's behavior during the illustration process.
- Ingestion points:
SKILL.md(Step 2: Analysis of article content),references/workflow.md(Vision analysis of reference images). - Boundary markers: None explicitly defined in the prompt templates to distinguish between article data and agent instructions.
- Capability inventory:
terminal(curl, cp),write_file,image_generate,vision_analyze. - Sanitization: Includes a 'strip secrets' step to remove credentials from source content, but does not specifically sanitize against prompt injection patterns.
- [COMMAND_EXECUTION]: The skill instructs the agent to use
terminalcommands for file management and network operations. - Evidence:
references/workflow.mdinstructs the use ofcpto copy local reference images andcurl -sSL -oto download generated images from URLs. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to download generated images from remote URLs provided by image generation tools.
- Evidence:
references/workflow.mdStep 6: 'Download the returned URL to {output-dir}/NN-{type}-{slug}.png via terminal (e.g. curl -sSL -o ... {url})'.
Audit Metadata