dreamina-prompt-text2image
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill is composed exclusively of Markdown documentation, vocabulary libraries, and configuration files. It does not contain any executable scripts (Python, Node.js, Shell) or binaries.
- [SAFE]: A thorough scan of the instructions revealed no attempts at prompt injection, behavioral overrides, or data exfiltration. The skill author, 'full-aigc-skills', provides legitimate resources focused on prompt engineering techniques.
- [DATA_EXFILTRATION]: No network operations (curl, wget, fetch) or sensitive file path accesses were detected. The use of hex color codes in the color library is purely for visual reference and does not involve data transfer.
- [REMOTE_CODE_EXECUTION]: There are no package management files (requirements.txt, package.json) or instructions to download and execute remote content.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied image descriptions, it lacks exploitable capabilities (such as shell execution or network requests) that would allow a successful indirect injection attack.
Audit Metadata