creativeclaw-generate-image
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of image URLs and prompts provided by users or external sources.
- Ingestion points: The skill accepts
image_urlandextras.image_urlsacross various generation workflows inSKILL.mdand specific model guides. - Boundary markers: Instructions include using double quotes for visible text and explicit clauses to 'preserve' specific elements (found in
references/images/gpt-image-2.mdandreferences/images/nano-banana-2.md). - Capability inventory: Includes image generation, model discovery, and asset management tools defined in
agents/openai.yaml. - Sanitization: The skill instructs the agent to inspect outputs and verify text accuracy before approval.
- [DYNAMIC_EXECUTION]: The skill describes the use of
creativeclaw-render-htmlfor generating images from HTML/CSS code. This is a core feature of the associated MCP toolset used for creating deterministic graphics. - [EXTERNAL_DOWNLOADS]: The skill references documentation and services from well-known providers, including OpenAI and Google, as well as the vendor's own infrastructure at
creativeclaw.co. These references are standard for the described functionality.
Audit Metadata