cli-anything-gimp
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a standard image editing interface with subcommands for managing projects, layers, and filters. No suspicious or high-risk activities were identified.
- [EXTERNAL_DOWNLOADS]: The skill installation instructions use
pip install cli-anything-gimp. This package corresponds to the skill name and purpose, representing standard installation procedure. - [INDIRECT_PROMPT_INJECTION]: The skill processes external image files (via
layer add-from-file) and project JSON data as ingestion points. While there are no explicit boundary markers or sanitization documented, the tool's capabilities are limited to image manipulation and rendering, which does not present a high-risk surface for indirect prompt injection.
Audit Metadata