view-imgur
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command (curl) to download files to the local file system.
- [EXTERNAL_DOWNLOADS]: Fetches content from the external domain i.imgur.com, which is a well-known image hosting service.
- [PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by downloading and reading content from untrusted external URLs.
- Ingestion points: User-provided Imgur URLs (SKILL.md)
- Boundary markers: Absent
- Capability inventory: Shell command execution (curl) and file read access (SKILL.md)
- Sanitization: No validation of the input URL beyond the expected domain.
Audit Metadata