baoyu-infographic
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to detect the existence of configuration files in the environment.
- Evidence:
SKILL.mdinstructs the agent to executetest -f .baoyu-skills/baoyu-infographic/EXTEND.mdandtest -f "$HOME/.baoyu-skills/baoyu-infographic/EXTEND.md"to locate optional user preference files. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by incorporating unvetted user content into prompts for downstream image generation tools.
- Ingestion points: Source content is ingested from user-provided file paths or manual text entry in Step 1.2 and saved to
source.md. - Boundary markers: The skill uses template placeholders like
{{CONTENT}}and{{TEXT_LABELS}}inreferences/base-prompt.mdto delimit user content from instructions. - Capability inventory: The skill performs file reading, file writing (e.g.,
analysis.md,prompts/infographic.md), and invokes other image generation skills. - Sanitization: No explicit sanitization or character escaping of the source content is documented; the skill follows a principle of verbatim data preservation which allows arbitrary text to be passed to the prompt generator.
Audit Metadata