image-to-svg
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill performs runtime compilation of a provided C source file (
nn_assign.c) usinggccto accelerate nearest-neighbor calculations.\n - Evidence: The
_ensure_nn_binaryfunction inscripts/pipeline.pyinvokesgccto compile the source, and_nn_assign_fastexecutes the resulting binary viasubprocess.run.\n- [COMMAND_EXECUTION]: The skill invokes several external command-line utilities to perform image processing and verification tasks.\n - Evidence:\n
rsvg-convertis used for SVG to PNG conversion in the verification protocol described inSKILL.md.\n- ImageMagick (
convertormagick) is used for image smoothing in the_im_smoothfunction withinscripts/pipeline.py.\n - The
gcccompiler is invoked to build the accelerated binary for quantization.\n- [EXTERNAL_DOWNLOADS]: The skill setup requires downloading and installing several well-known image processing libraries and system packages.\n - Evidence:
SKILL.mdinstructs the user topip installpackages includingopencv-python-headless,scikit-image,scipy, andscikit-learn, and toapt-get installthelibrsvg2-binpackage.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied image data, which represents a potential attack surface for indirect prompt injection.\n - Ingestion points: User-provided raster images processed by the
image_to_svgfunction.\n - Boundary markers: The skill instructions emphasize computational analysis over visual interpretation, providing a logical boundary that prevents the LLM from directly interpreting potential text-based instructions inside images.\n
- Capability inventory: The skill can execute shell commands via
subprocess, compile source code, and perform file system operations.\n - Sanitization: Input images are processed via binary vision libraries (OpenCV and ImageMagick), though no specific content filtering for malicious instructions is performed.
Audit Metadata