studio-imagegen
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts external input through frame specifications and direct prompt strings, which are then used as instructions for remote image generation models.
- Ingestion points: Input is accepted via the
--specand--promptarguments inscripts/lib/generate-image.mjs. - Boundary markers: The skill does not implement delimiters or specific instructions to isolate user-provided text from the generation task.
- Capability inventory: The skill can write files to the local filesystem (images, metadata, and logs) and perform network operations to the OpenRouter API.
- Sanitization: No sanitization or validation is applied to the input prompt data before it is sent to the model provider.
- [COMMAND_EXECUTION]: The skill utilizes shell script wrappers to execute Node.js implementation files that interact with the system. These scripts perform operations including reading configuration, writing image files, and creating directories to store usage logs.
- [DYNAMIC_EXECUTION]: The skill performs dynamic module loading using paths computed at runtime to integrate with shared vendor libraries.
- Evidence: In
scripts/lib/resolve.mjsandscripts/lib/ledger-bridge.mjs, the skill uses dynamicimport()calls to load functionality from sibling directories (e.g.,studio-core,studio-universe,studio-ledger) based on environment variables or relative path calculations.
Audit Metadata