flux
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch external reference material from 'https://www.pixazo.ai/models/flux.md' to resolve parameter schemas. This ingestion of remote content into the agent's context is an attack surface.
- Ingestion points: SKILL.md (Full reference section).
- Boundary markers: None; the skill does not specify delimiters or instructions to ignore commands within the fetched content.
- Capability inventory: The skill possesses the ability to write to the file system, execute shell commands (chmod), and perform network operations.
- Sanitization: None; the skill does not define validation or sanitization for the fetched documentation.
- [COMMAND_EXECUTION]: The skill directs the agent to execute 'chmod 600' to secure the local API key file.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the vendor's official domain at 'https://www.pixazo.ai'.
Audit Metadata