ad-delayer
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill manages authentication tokens within the
~/.bria/credentialsfile. These tokens are transmitted to vendor-controlled endpoints atengine.prod.bria-api.comto authorize image processing requests. This file access and network activity are strictly aligned with the skill's stated purpose and use of vendor-owned infrastructure. - [COMMAND_EXECUTION]: The provided helper script uses standard shell utilities including
curl,sed,grep, andbase64. These tools are used to encode local image files, interact with the REST API, and manage the local file system for downloaded assets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes JSON manifests from the Bria API status endpoint to identify and download image layers. 1. Ingestion points: External data enters through the
result.jsonmanifest file at the end of the delayering process. 2. Boundary markers: None are used as the data is consumed by a shell script for file management rather than being interpolated into an LLM prompt. 3. Capability inventory: The skill utilizescurl,mkdir, andmvto download and organize asset files. 4. Sanitization: Filenames extracted from the manifest are sanitized using a character whitelist (A-Za-z0-9._-) to prevent path traversal or other file-system-based injection attacks.
Audit Metadata