imagegen-frontend-web

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill employs strong directive language intended to override the base model's default behaviors. Phrases such as "CRITICAL OUTPUT RULE", "HARD OUTPUT RULE
  • READ FIRST", and the explicit statement "This rule overrides any model default that wants to collapse output into a single image" are used to force the model to adhere to the skill's specific multi-image formatting requirements.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted user data to drive its image generation logic.
  • Ingestion points: The skill dynamically interprets user design briefs (e.g., industry, brand mood, specific style requests) to adjust its "Combinatorial Variation Engine".
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands within the user brief are present in the documentation.
  • Capability inventory: The skill leverages image generation tools to produce visual design references based on user input.
  • Sanitization: There is no evidence of sanitization, validation, or escaping logic applied to user-supplied text before it influences the generation prompts.
  • [NO_CODE]: The analyzed skill consists entirely of instructional Markdown content and YAML metadata; it does not include or reference any executable scripts, binary files, or external software dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 05:42 AM