meitu-upscale
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the installation of the
meitu-clipackage from the official NPM registry to enable upscaling capabilities.\n- [DATA_EXFILTRATION]: Accesses the vendor-specific credential file located at~/.meitu/credentials.jsonto authenticate API requests.\n- [COMMAND_EXECUTION]: Utilizesmeitufor image enhancement operations,curlfor fetching remote images, andrmfor cleaning up temporary files in the/tmp/directory.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: Processes user-provided image URLs and file paths within the
Executesection ofSKILL.md.\n - Boundary markers: No specific delimiters or boundary markers are defined to isolate the user-provided image source string.\n
- Capability inventory: Possesses permissions to execute shell commands (
meitu,curl,rm) and perform file system read/write operations.\n - Sanitization: Lacks described sanitization or validation routines for external input before it is interpolated into CLI command arguments.
Audit Metadata