create-product-images-higgsfield-ms
Warn
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The
references/nsfw_routing.mdfile provides explicit instructions for the agent to bypass safety and content filters of downstream image generation models. It details a "vocabulary to scrub" strategy, instructing the agent to replace terms like "baby", "eczema", and "intimate" with neutral synonyms to avoid safety blocks. It also guides the agent to select specific models (e.g., Kling 3.0) that are known to have more permissive safety thresholds for sensitive subjects. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating an attack surface where malicious content could influence agent behavior or output.
- Ingestion points: External brand websites (via asset discovery described in
references/design_guidelines.md) and user-supplied briefs. - Boundary markers: None identified. There are no instructions or delimiters provided to ensure the agent distinguishes between data and embedded instructions.
- Capability inventory: Execution of shell scripts (
scripts/render_hyperframe.py,scripts/composite.py), browser automation via Playwright, and media processing usingffmpeg. - Sanitization: No evidence of sanitization, escaping, or validation of external brand assets or brief content before they are interpolated into prompts or used in code execution.
- [COMMAND_EXECUTION]: The workflow relies on the execution of local scripts and system tools.
scripts/render_hyperframe.pyuses Playwright to render HTML and GSAP animations, whilescripts/composite.pyandmake_subtitles.pyutilizeffmpegfor video assembly. These operations are driven by parameters derived from user briefs and external brand data. - [EXTERNAL_DOWNLOADS]: The skill fetches configuration and assets from various services. It requires the installation of Python packages (
playwright,pillow) and system utilities (ffmpeg). It also downloads browser binaries viaplaywright install chromiumand makes runtime API calls to external services includingfal.ai,veed, andcassetteai.
Audit Metadata