linkfox-aigc-textgen
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes functionality to download media files (images and videos) from external URLs to a local session cache directory for processing. This is implemented in
scripts/aigc_textgen.pyvia thedownload_mediafunction using theurlliblibrary. - [COMMAND_EXECUTION]: The skill utilizes Python scripts to interact with the LinkFox API. Instructions in
SKILL.mdguide the agent to execute these scripts and suggest using shell tools likejqto parse and chain outputs between different AI agent skills. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, specifically through the
promptandimageUrlsparameters. These inputs are passed to an LLM for generation and analysis, presenting a standard indirect prompt injection surface. - Ingestion points:
promptstring andimageUrlsarray inscripts/aigc_textgen.pyandSKILL.md. - Boundary markers: None explicitly used in the script level; the skill acts as a client to a remote AI service.
- Capability inventory: Performs network requests (API calls and media downloads) and file system operations (caching results and media in a local
linkfox/directory). - Sanitization: Implements a custom line-break encoding/decoding mechanism (
⏎U+23CE) to ensure text content can be safely passed through shell variables without breaking JSON structures.
Audit Metadata