refine-mask-interactive
Warn
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command (
quick-rmbg --infinite-hop "$path") using a variable derived from user input. While the procedure includes a step to resolve the path and verify its existence, executing shell commands with user-provided strings is a known risk for command injection if shell metacharacters are not properly escaped by the runtime environment. - [EXTERNAL_DOWNLOADS]: The skill depends on an external CLI tool called
quick-rmbgbeing available on the system PATH. It does not verify the integrity or source of this external dependency.
Audit Metadata