image-enhancement
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the user or agent to execute a command with elevated privileges using
sudoto install software. - Evidence:
sudo apt-get install imagemagickinSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external Python packages from the public PyPI registry.
- Evidence:
pip install Pillowandpip install opencv-pythoninSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data that could potentially contain hidden instructions.
- Ingestion points: Processes local image files (e.g.,
screenshot.png,input.jpg, and all.pngfiles in a directory) through Python and Bash scripts. - Boundary markers: None present; there are no instructions to ignore embedded data in the images.
- Capability inventory: The skill possesses file system write capabilities via the
Pillowlibrary'ssavemethod and the ImageMagickconvertutility. - Sanitization: None detected; the skill performs image transformations but does not validate or sanitize the input files for adversarial content.
Recommendations
- AI detected serious security threats
Audit Metadata