ideogram4
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read local configuration files based on user-provided brand names, creating a potential path traversal surface.\n- Ingestion points: User-specified brand names in image requests (e.g., 'Digital Samba' in
examples.md).\n- Boundary markers: Not specified in the instruction set.\n- Capability inventory: Reading from thebrands/directory and execution oftools/ideogram4.pywhich interacts with an external API (found inSKILL.md).\n- Sanitization: No evidence of input validation or path sanitization.\n- [COMMAND_EXECUTION]: Uses a local utility scripttools/ideogram4.pyto communicate with the Ideogram API via shell commands. This is a primary function of the skill.
Audit Metadata