deai-image
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python and Bash scripts execute external tools (
exiftoolandmagick) to manipulate image data. These executions are performed securely by passing arguments as lists in Python and using properly quoted variables in Bash, which prevents command injection vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill accepts image files as input, which are processed by third-party libraries and system utilities. This implementation follows standard patterns for CLI image processing tools and does not introduce novel security risks beyond the inherent attack surface of the underlying tools.
Audit Metadata