image-enhancement

Fail

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs the user or agent to execute a command with elevated privileges using sudo to install software.
  • Evidence: sudo apt-get install imagemagick in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external Python packages from the public PyPI registry.
  • Evidence: pip install Pillow and pip install opencv-python in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data that could potentially contain hidden instructions.
  • Ingestion points: Processes local image files (e.g., screenshot.png, input.jpg, and all .png files in a directory) through Python and Bash scripts.
  • Boundary markers: None present; there are no instructions to ignore embedded data in the images.
  • Capability inventory: The skill possesses file system write capabilities via the Pillow library's save method and the ImageMagick convert utility.
  • Sanitization: None detected; the skill performs image transformations but does not validate or sanitize the input files for adversarial content.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 23, 2026, 06:08 PM