filmkit-fujifilm-camera
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs users to modify system-level hardware permissions by creating udev rules and changing user group memberships using
sudo udevadmandsudo usermodcommands. - [EXTERNAL_DOWNLOADS]: Users are directed to clone and install dependencies from a third-party, non-official GitHub repository (
github.com/eggricesoy/filmkit). - [COMMAND_EXECUTION]: The documentation provides specific shell commands for environment setup and software installation, including high-privilege operations that affect system security posture (e.g., setting USB device modes to 0666).
- [INDIRECT_PROMPT_INJECTION]: The skill documents an architecture that ingests untrusted data via Base64-encoded URL parameters for processing and hardware interaction.
- Ingestion points: The
importPresetfunction inSKILL.mdreads and processes data from thepresetURL query parameter. - Boundary markers: No specific delimiters or warnings to ignore embedded instructions are present in the documented logic.
- Capability inventory: The skill possesses the capability to write device properties directly to connected camera hardware over the PTP protocol using WebUSB.
- Sanitization: The implementation uses
atobandJSON.parsebut does not show validation of property codes or values before they are sent to the hardware.
Recommendations
- AI detected serious security threats
Audit Metadata