The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes the uv package manager to handle its dependencies, google-genai and pillow. These are widely used, legitimate libraries provided by a trusted organization.- [INDIRECT_PROMPT_INJECTION]: The script scripts/generate_image.py accepts user-defined prompts and input images which are then transmitted to an external AI model. This is the intended behavior for an image generation tool but constitutes an indirect injection surface.
Ingestion points: The --prompt and --input-image arguments in the scripts/generate_image.py script.
Boundary markers: None present; the raw input is passed directly to the model provider's client.
Capability inventory: The script has the ability to write files to the project directory and perform network requests to the Gemini API.
Sanitization: No input validation or sanitization is performed on the prompt strings before they are sent to the model provider.

threejs-image-generator