skills/pixazo-ai/skills/smart-resize/Gen Agent Trust Hub

smart-resize

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts and processes untrusted data from users which is then interpolated into API requests for image processing.
  • Ingestion points: User-provided image descriptions and external image URLs (image_url) specified in SKILL.md.
  • Boundary markers: None identified in the skill instructions to delimit untrusted content.
  • Capability inventory: The skill uses the requests library in Python and fetch in Node.js to perform network operations to the Pixazo API.
  • Sanitization: There is no evidence of input validation or sanitization before the data is sent to the API gateway.
  • [EXTERNAL_DOWNLOADS]: The skill is configured to fetch additional documentation and parameter specifications from the vendor's official website.
  • Evidence: Fetches configuration and full reference data from https://www.pixazo.ai/models/smart-resize.md.
  • [COMMAND_EXECUTION]: The documentation mentions a command for managing multiple skills via a package runner.
  • Evidence: npx skills add Pixazo-AI/skills --skill '*' is referenced in the related skills section.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 09:01 PM