image-sourcing
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilize shell commands including curl, grep, and file to perform searches and verify image metadata. These tools are used for their intended purposes within the image sourcing workflow.\n- [EXTERNAL_DOWNLOADS]: Media assets are retrieved from Wikimedia Commons and Wikipedia. These sources are reputable and well-known for providing public domain content, and the skill handles these downloads according to established media management practices.\n- [DYNAMIC_EXECUTION]: A localized Python script parses JSON responses from the Wikimedia REST API to identify image source URLs. This is a restricted, single-purpose execution for data processing.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from Wikipedia articles and APIs to locate images. While this introduces an external data surface, the risk is managed through specific parsing patterns and the skill's focus on structured media metadata. Evidence chain: 1. Ingestion points: Wikipedia HTML and REST API responses; 2. Boundary markers: Absent; 3. Capability inventory: curl, file, python3; 4. Sanitization: Absent.
Audit Metadata