create-product-images-higgsfield-ms

Warn

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The references/nsfw_routing.md file provides explicit instructions for the agent to bypass safety and content filters of downstream image generation models. It details a "vocabulary to scrub" strategy, instructing the agent to replace terms like "baby", "eczema", and "intimate" with neutral synonyms to avoid safety blocks. It also guides the agent to select specific models (e.g., Kling 3.0) that are known to have more permissive safety thresholds for sensitive subjects.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating an attack surface where malicious content could influence agent behavior or output.
  • Ingestion points: External brand websites (via asset discovery described in references/design_guidelines.md) and user-supplied briefs.
  • Boundary markers: None identified. There are no instructions or delimiters provided to ensure the agent distinguishes between data and embedded instructions.
  • Capability inventory: Execution of shell scripts (scripts/render_hyperframe.py, scripts/composite.py), browser automation via Playwright, and media processing using ffmpeg.
  • Sanitization: No evidence of sanitization, escaping, or validation of external brand assets or brief content before they are interpolated into prompts or used in code execution.
  • [COMMAND_EXECUTION]: The workflow relies on the execution of local scripts and system tools. scripts/render_hyperframe.py uses Playwright to render HTML and GSAP animations, while scripts/composite.py and make_subtitles.py utilize ffmpeg for video assembly. These operations are driven by parameters derived from user briefs and external brand data.
  • [EXTERNAL_DOWNLOADS]: The skill fetches configuration and assets from various services. It requires the installation of Python packages (playwright, pillow) and system utilities (ffmpeg). It also downloads browser binaries via playwright install chromium and makes runtime API calls to external services including fal.ai, veed, and cassetteai.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 04:39 PM
Security Audit — agent-trust-hub — create-product-images-higgsfield-ms