bria-fibo-image
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python implementation (bria_fibo.py) that handles API interactions and file management. It includes advanced security features such as SSRF protection via socket.getaddrinfo and ipaddress.is_global checks to ensure network requests only target public IP addresses.
- [EXTERNAL_DOWNLOADS]: The skill automates the retrieval of generated image artifacts from the Bria API infrastructure. These downloads are performed over HTTPS with strict hostname validation and secondary integrity checks using file magic number verification and the Pillow library to prevent processing of malicious or malformed files.
- [INDIRECT_PROMPT_INJECTION]: As the skill processes user-supplied prompts and reference images, it acknowledges the risk of indirect injection. It mitigates this by enforcing provider-side moderation filters, providing a structured Decision record for intent grounding, and mandating human review for all outputs.
- [SAFE]: The skill exhibits exemplary security practices, including the use of environment variables for secret management, atomic file operations to prevent data corruption, and a cryptographic approval workflow (BRIA_APPROVED_REQUEST_SHA256) that binds user authorization to specific, immutable request payloads.
Audit Metadata