Skills
Navigate
skills/practicalswan/agent-skills/netlify-image-cdn/Gen Agent Trust Hub

netlify-image-cdn

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for processing data from external sources, such as remote URLs and user-provided uploads, creating an ingestion surface for potentially untrusted content.
  • Ingestion points: The url query parameter for the image transformation endpoint in SKILL.md and the formData processing in references/user-uploads.md.
  • Boundary markers: The documentation guides users to implement a remote_images allowlist within the netlify.toml configuration file to restrict external access.
  • Capability inventory: The skill outlines processes for fetching remote images, transforming them using CDN parameters, and storing binary data using Netlify Blobs.
  • Sanitization: Included code snippets demonstrate server-side validation for file types, along with using unique identifiers for stored resources.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the @netlify/blobs package from a well-known service provider to handle binary data storage in the user-upload pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:16 AM