youtube-popup-graphic

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use shell environments to execute curl for PUT operations and background bash loops for polling generation status.- [EXTERNAL_DOWNLOADS]: The workflow transmits local media data to external URLs provided by the Higgsfield service.- [DATA_EXFILTRATION]: The skill reads user-specified local file paths and sends their contents to an external endpoint, creating a potential vector for data exposure.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests user-supplied names and file paths without validation. * Ingestion points: Item names and file paths from $ARGUMENTS and conversation. * Boundary markers: None provided for shell or prompt interpolation. * Capability inventory: Shell access (curl, bash), network egress, and file system read access. * Sanitization: No sanitization or escaping of external content is specified before use.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:07 AM
Security Audit — agent-trust-hub — youtube-popup-graphic