hyper3d
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages a Pixazo API key by checking environment variables and the local path
~/.pixazo/api-key. It correctly instructs the agent to save user-provided keys with restricted permissions (chmod 600), adhering to security best practices. - [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch model-specific configuration and documentation from the vendor's domain at
https://www.pixazo.ai/models/hyper3d.md. - [COMMAND_EXECUTION]: The documentation mentions an
npxcommand for installing related skills from thePixazo-AIorganization as a reference for users. - [INDIRECT_PROMPT_INJECTION]: The skill processes user prompts and API response data.
- Ingestion points: User prompts and task status responses from the Pixazo gateway.
- Boundary markers: No specific boundary markers are defined for the prompt interpolation.
- Capability inventory: File writes to
~/.pixazo/,chmodcommands, and network operations usingcurl, Pythonrequests, and Node.jsfetch. - Sanitization: The instructions do not specify sanitization for user-provided strings.
Audit Metadata