threejs-image-generator
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
uvpackage manager to fetch and install standard dependencies, specificallygoogle-genaiandpillow. These are official and well-maintained libraries from a trusted organization (Google) and the established Python ecosystem.\n- [INDIRECT_PROMPT_INJECTION]: Thescripts/generate_image.pyscript facilitates image generation and editing by processing user-provided prompts and images. While this is the core functionality, it represents the ingestion point for untrusted data that is passed to the generative model.\n - Ingestion points: The
--promptand--input-imagecommand-line arguments inscripts/generate_image.py.\n - Capability inventory: The skill has the capability to write generated images to the file system and perform network requests to Google's Gemini API.\n
- Boundary markers: There are no explicit delimiters or boundary markers wrapping the user prompt before it is sent to the API.\n
- Sanitization: No specific sanitization or validation logic is applied to the incoming text or image data.
Audit Metadata