infographics
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_infographic.pyusessubprocess.run()to execute the internal AI generation script. The call uses a list-based argument structure and avoids a shell environment, which is a safe implementation for chaining internal scripts.- [EXTERNAL_DOWNLOADS]: The skill makes network requests to the OpenRouter API (openrouter.ai) inscripts/generate_infographic_ai.py. This is a well-known service used to access the models required for the skill's primary function of infographic generation and research.- [PROMPT_INJECTION]: The skill features an automated research integration that presents a surface for indirect prompt injection. 1. Ingestion points: Theresearch_topicandweb_searchmethods inscripts/generate_infographic_ai.pyfetch untrusted content from the internet via the Perplexity Sonar model. 2. Boundary markers: The researched data is interpolated into the generation prompt under aRESEARCHED DATA AND FACTSheader, but it lacks robust delimiters or explicit instructions to ignore embedded malicious commands. 3. Capability inventory: The skill is capable of writing image and log files to the local file system and making further API requests to OpenRouter. 4. Sanitization: The skill does not sanitize or filter the content returned from web research before including it in the prompts for the image generation model.
Audit Metadata