image-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's entry script (scripts/extract-colors.sh) installs required Node.js libraries from the official NPM registry during its first run.
- [COMMAND_EXECUTION]: The skill uses shell commands to manage its environment and execute the image processing logic in scripts/extract-colors.js.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted image files as input. 1. Ingestion points: External image files provided to the color extraction script via the imagePath argument. 2. Boundary markers: None. 3. Capability inventory: Execution of shell commands (npm install) and reading of local files. 4. Sanitization: The skill relies on structural parsing of the image data by the get-pixels library which naturally validates image headers and content.
Audit Metadata