Skills
Navigate
skills/practicalswan/agent-skills/netlify-image-cdn/Gen Agent Trust Hub

netlify-image-cdn

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and installs dependencies from official Netlify sources, which is expected for its functionality.
  • Evidence: npm install @netlify/blobs found in references/user-uploads.md.
  • Evidence: References the official repository https://github.com/netlify/context-and-tools in CHANGELOG.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill documentation describes an architecture that processes untrusted external data (images and URLs).
  • Ingestion points: references/user-uploads.ts (Processes multipart form data from user uploads); SKILL.md (Processes remote image URLs via the url query parameter).
  • Boundary markers: None explicitly mentioned for prompt injection, though standard for an image transformation API.
  • Capability inventory: references/user-uploads.ts (Writes to storage using @netlify/blobs); SKILL.md (Network fetching of external images via /.netlify/images endpoint).
  • Sanitization: references/user-uploads.ts includes server-side validation for ALLOWED_TYPES (mime types) and MAX_SIZE (file size limits).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:52 AM
Security Audit — agent-trust-hub — netlify-image-cdn