infographics
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_infographic.pyusessubprocess.runto call a secondary generation script. It uses an argument list for execution, which is a secure practice that avoids shell injection vulnerabilities.- [EXTERNAL_DOWNLOADS]: The skill connects toopenrouter.aito interact with Perplexity and Gemini APIs for data research and image generation. These requests target a well-known and expected service provider for such tasks.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface inscripts/generate_infographic_ai.pywhere external research data is used to build prompts. \n - Ingestion points: Research results from Perplexity Sonar are incorporated into the image generation prompt in the
generate_iterativemethod. \n - Boundary markers: Research content is concatenated with the prompt instructions without delimiters or markers to distinguish it from agent commands. \n
- Capability inventory: The skill has the capability to generate images and write them to the filesystem via the OpenRouter API. \n
- Sanitization: There is no filtering or validation of the text retrieved from the research phase before it is used in the prompt instructions.
Audit Metadata