nous-branding
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The
references/pitfalls.mddocument provides strategies for navigating content moderation filters on external image generation platforms. It suggests rephrasing descriptions to avoid triggering safety blocks (e.g., using neutral physical descriptions instead of emotional or 'threat-adjacent' vocabulary), which is a common prompt engineering technique to avoid false positives. - [DATA_EXPOSURE]: The
scripts/generate-with-ref.pyutility accesses configuration and environment files located in the~/.hermes/directory. It specifically reads theOPENAI_API_KEYfrom a local.envfile to authenticate requests to the OpenAI API. - [COMMAND_EXECUTION]: The skill includes two Python scripts,
generate-with-ref.pyandpostprocess.py, which are intended to be executed by the agent to perform image generation and manipulation. These scripts use standard libraries (Pillow, NumPy) for image processing andurllibfor API communication. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.openai.comto perform image edits. This is the intended primary purpose of the generation script and targets a well-known service provider.
Audit Metadata