filmkit-fujifilm-camera

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs users to modify system-level hardware permissions by creating udev rules and changing user group memberships using sudo udevadm and sudo usermod commands.
  • [EXTERNAL_DOWNLOADS]: Users are directed to clone and install dependencies from a third-party, non-official GitHub repository (github.com/eggricesoy/filmkit).
  • [COMMAND_EXECUTION]: The documentation provides specific shell commands for environment setup and software installation, including high-privilege operations that affect system security posture (e.g., setting USB device modes to 0666).
  • [INDIRECT_PROMPT_INJECTION]: The skill documents an architecture that ingests untrusted data via Base64-encoded URL parameters for processing and hardware interaction.
  • Ingestion points: The importPreset function in SKILL.md reads and processes data from the preset URL query parameter.
  • Boundary markers: No specific delimiters or warnings to ignore embedded instructions are present in the documented logic.
  • Capability inventory: The skill possesses the capability to write device properties directly to connected camera hardware over the PTP protocol using WebUSB.
  • Sanitization: The implementation uses atob and JSON.parse but does not show validation of property codes or values before they are sent to the hardware.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 10:36 AM