dreamina-canvas-download-assets
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local environment by executing the dreamina-canvas CLI tool to manage resources and standard utilities such as wc, shasum, and ffprobe to verify the integrity and properties of downloaded artifacts. It utilizes shell variables like $PROJECT_ID and $USER_APPROVED_DIR within these commands.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses JSON output from the dreamina-canvas tool, creating a surface for potential indirect prompt injection from external data.\n
- Ingestion points: JSON-formatted metadata and response data from the resource get and resource download commands.\n
- Boundary markers: The instructions do not define specific delimiters for separating tool output from other instructions.\n
- Capability inventory: The skill has the capability to execute the dreamina-canvas CLI (which accesses network and disk) and read local file data via system utilities.\n
- Sanitization: A robust verification gate is implemented, requiring the downloaded file to match the SHA-256 hash and byte count provided by the tool, which serves as a safeguard against corrupted or malicious file delivery.
Audit Metadata