ai-product-photography
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external installation instructions hosted on GitHub (
raw.githubusercontent.com/inference-sh/skills/). This is used to guide the user in setting up the required CLI environment for the skill's functionality. - [COMMAND_EXECUTION]: The skill provides various shell command examples using the
beltCLI tool andnpxfor skill management. These are legitimate administrative and operational commands necessary for the described workflow of generating AI images. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied prompts that are interpolated into shell command arguments for the image generation model. While this creates a vulnerability surface for prompt injection, it is a fundamental part of the skill's intended purpose and is mitigated by the scope of the image generation tool.
Audit Metadata