multi-agent-image
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwithintemplates/linear_batch.pyto execute its owndesign_image.pyscript. This is used to support sequential batch generation. The command is safely constructed as a list, preventing shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill interacts with
api.apimart.aito submit image generation tasks and poll for completion status. It downloads the resulting image files to a localoutputdirectory. These operations are core functionalities and target a documented API provider. - [DATA_EXFILTRATION]: The skill transmits user-provided prompts and optionally base64-encoded local images (from the
case_libraryused as style references) to the externalapimart.aiendpoint. This is the intended behavior for image-to-image and design-led generation workflows. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input and interpolates it into complex design prompts using the
design_compiler.pymodule. While it lacks rigorous sanitization, it employs structured prompt construction logic that treats user input as a 'brief' within a larger design context, which reduces the impact of potential injection attempts.
Audit Metadata