meitu-upscale

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of the meitu-cli package from the official NPM registry to enable upscaling capabilities.\n- [DATA_EXFILTRATION]: Accesses the vendor-specific credential file located at ~/.meitu/credentials.json to authenticate API requests.\n- [COMMAND_EXECUTION]: Utilizes meitu for image enhancement operations, curl for fetching remote images, and rm for cleaning up temporary files in the /tmp/ directory.\n- [INDIRECT_PROMPT_INJECTION]:\n
  • Ingestion points: Processes user-provided image URLs and file paths within the Execute section of SKILL.md.\n
  • Boundary markers: No specific delimiters or boundary markers are defined to isolate the user-provided image source string.\n
  • Capability inventory: Possesses permissions to execute shell commands (meitu, curl, rm) and perform file system read/write operations.\n
  • Sanitization: Lacks described sanitization or validation routines for external input before it is interpolated into CLI command arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 07:19 AM