cover-design-open
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation instructions in the README recommend downloading the skill file directly from the author's official GitHub repository (
github.com/feitangyuan/oh-my-cover-design). This is a standard distribution method for skills on this platform. - [PROMPT_INJECTION]: The skill processes user-provided articles to generate design prompts, which represents a surface for indirect prompt injection where malicious instructions could be embedded in the text being analyzed.
- Ingestion points: The skill ingests article content and user-provided image descriptions in
SKILL.md. - Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions for the processed article content.
- Capability inventory: The skill's functionality is limited to generating text-based prompts for external image generators; it does not invoke shell commands, file system writes, or network operations directly.
- Sanitization: No sanitization or validation is applied to the article content before it is processed by the agent.
Audit Metadata