image-convert
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute bash commands using the
converttool from ImageMagick to perform image processing tasks. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it processes untrusted image data. 1. Ingestion points: Image files located in the
{{SHARED_VOLUME}}/input/directory. 2. Boundary markers: Absent; there are no instructions for the agent to ignore instructions embedded in image metadata. 3. Capability inventory: Shell execution of theconvertutility. 4. Sanitization: Absent; the skill does not include steps to validate or sanitize file contents or metadata.
Audit Metadata