generate-image
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is to execute a local script located at
~/.agents/tools/generate-image.pywith arguments provided through the command line. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, user-provided text prompts as arguments (
--prompt) for the image generation script. This creates an attack surface where a malicious user prompt could attempt to escape the command string or manipulate the tool's behavior if the underlying shell execution is not properly sanitized.
Audit Metadata