media-higgsfield-assets
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text and media inputs for asset generation, which introduces a surface for data-driven prompt injection.
- Ingestion points: User instructions for texture generation (
texture_promptinreferences/3d.md), audio synthesis (instructioninreferences/audio.md), and general user queries for video analysis are ingested by the skill. - Boundary markers: There are no explicit delimiters or specific 'ignore-embedded-instructions' markers defined in the referenced files to isolate user-supplied prompts from the model's task instructions.
- Capability inventory: The skill utilizes tools for dynamic model exploration (
models_explore), job status monitoring (job_status), and remote media generation, which are triggered based on these user inputs. - Sanitization: The skill effectively mitigates direct file injection by explicitly rejecting raw external URLs and requiring internal
media_idorjob_idreferences for all input media assets.
Audit Metadata