skills/nexscope-ai/nexscope-ecommerce-skills/ecommerce-multimodal-recognize-image/Gen Agent Trust Hub
ecommerce-multimodal-recognize-image
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external images and user-provided requirements, which introduces a surface where malicious instructions embedded in images (e.g., via visual text) could attempt to influence agent behavior.
- Ingestion points: The
imageUrlandrequirementparameters inSKILL.mdandscripts/multimodal_recognize_image.pyaccept untrusted external data. - Boundary markers: The skill does not implement explicit delimiters or instructions to ignore instructions found within analyzed visual content.
- Capability inventory: The skill utilizes
urllib.requestfor network operations andosfor managing local session data and caching. - Sanitization: Input requirements and the resulting multimodal analysis are processed without sanitization or strict schema validation.
- [COMMAND_EXECUTION]: The skill executes Python scripts to perform its core image recognition and asset management tasks.
- Evidence:
scripts/multimodal_recognize_image.pyandscripts/upload_image.pyare used to communicate with the Nexscope API, handle local file reads for uploads, and manage a local cache directory in the project or home folder.
Audit Metadata