skills/bria-ai/bria-skill/ad-delayer/Gen Agent Trust Hub

ad-delayer

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local bash scripts (bria_delayer_client.sh) and curl commands to interact with the Bria AI API.\n
  • Evidence:\n
  • bria_delayer_client.sh implements functions to submit jobs, poll for status, and download results.\n
  • User-provided prompts are escaped using sed 's/\\/\\\\/g; s/"/\\"/g' before inclusion in JSON payloads.\n- [EXTERNAL_DOWNLOADS]: Extracted image layers and manifest files are downloaded from the vendor's API.\n
  • Evidence:\n
  • The bria_delayer_download function in bria_delayer_client.sh fetches assets from engine.prod.bria-api.com.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external image content which may contain embedded text, creating an indirect injection surface.\n
  • Ingestion points: User-provided image files and URLs processed via the bria_delayer function.\n
  • Boundary markers: No explicit delimiters are defined for extracted text data in the manifest processing.\n
  • Capability inventory: The skill performs network requests (curl) and local file operations (mkdir, mv, printf).\n
  • Sanitization: Filenames derived from extracted layer IDs are sanitized using tr -cd 'A-Za-z0-9._-' to prevent path traversal.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 03:07 PM