higgsfield
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed cinematic vocabulary, MCSLA prompt structures, and genre-specific templates. All analyzed scripts (
higgsfield_memory.py,seedance_lint.py,validate.py, etc.) are designed for local project maintenance and prompt validation. - [COMMAND_EXECUTION]: Utility scripts such as
validate_user_guide.pyandgenerate_user_guide.pyutilize thesubprocessmodule to execute system commands (pdftotext) and manage release workflows. These are implemented using best practices, such as passing arguments as lists to prevent shell injection, and are intended for developer-led maintenance tasks. - [EXTERNAL_DOWNLOADS]: The skill references several third-party Python libraries (
fpdf2,pdfplumber) for generating and validating the user guide. These are standard packages from official registries and do not contribute to a high-severity verdict. - [DATA_EXFILTRATION]: No network operations or attempts to access sensitive system paths (e.g., SSH keys or cloud credentials) were found. Data storage is limited to local JSON files within the
db/directory of the skill repository.
Audit Metadata