generate-image
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). generate-image 技能在运行时把用户提供的“提示词/文字描述”作为
scripts/generate_image.py的--prompt传入并随请求发送到 ZenMux 的POST https://zenmux.ai/api/v1/images/generations（之后还会对生成图片做视觉质检）。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata