youtube-popup-graphic
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell environments to execute
curlfor PUT operations and backgroundbashloops for polling generation status.- [EXTERNAL_DOWNLOADS]: The workflow transmits local media data to external URLs provided by the Higgsfield service.- [DATA_EXFILTRATION]: The skill reads user-specified local file paths and sends their contents to an external endpoint, creating a potential vector for data exposure.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests user-supplied names and file paths without validation. * Ingestion points: Item names and file paths from$ARGUMENTSand conversation. * Boundary markers: None provided for shell or prompt interpolation. * Capability inventory: Shell access (curl, bash), network egress, and file system read access. * Sanitization: No sanitization or escaping of external content is specified before use.
Audit Metadata