dreamina-cli
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
dreaminaCLI and various subcommands liketext2image,session, andloginto perform generation tasks and manage OAuth states. It also references the use of Maven (mvn test) in the contract verification documentation to ensure environment consistency. - [EXTERNAL_DOWNLOADS]: Documentation in the contract reference file points to the official Dreamina website (
jimeng.jianying.com) for downloading and installing the CLI tool. - [REMOTE_CODE_EXECUTION]: The skill's reference documentation provides an installation command that pipes a remote script into a shell (
curl | bash). While this is sourced from the official product domain, it represents a high-privilege execution pattern. - [PROMPT_INJECTION]: The skill processes untrusted user-provided text prompts for image and video generation, which creates a surface for indirect prompt injection.
- Ingestion points: User-supplied prompts and local image/media file paths are used as arguments for CLI commands (SKILL.md).
- Boundary markers: None identified in the instructions to separate user content from system instructions.
- Capability inventory: The skill can execute various CLI subcommands via shell with arguments interpolated from user input.
- Sanitization: No explicit sanitization or escaping mechanisms for user-provided input strings are documented.
Audit Metadata