ideogram4

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read local configuration files based on user-provided brand names, creating a potential path traversal surface.\n- Ingestion points: User-specified brand names in image requests (e.g., 'Digital Samba' in examples.md).\n- Boundary markers: Not specified in the instruction set.\n- Capability inventory: Reading from the brands/ directory and execution of tools/ideogram4.py which interacts with an external API (found in SKILL.md).\n- Sanitization: No evidence of input validation or path sanitization.\n- [COMMAND_EXECUTION]: Uses a local utility script tools/ideogram4.py to communicate with the Ideogram API via shell commands. This is a primary function of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 11:42 PM