qwen-image-edit-2511
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided 'edit briefs' to generate file content, creating a potential surface for indirect prompt injection.
- Ingestion points: The workflow in SKILL.md reads external 'edit briefs' and 'source-image role descriptions' in Step 1.
- Boundary markers: The skill lacks explicit boundary markers, delimiters, or instructions to ignore embedded commands within the input data.
- Capability inventory: The skill performs file-write operations to the local filesystem as defined in Step 10 of SKILL.md.
- Sanitization: There is no evidence of input validation, escaping, or sanitization for the data ingested from the edit brief before it is used to generate the final prompt.
Audit Metadata