print-tiff-to-web-images
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands using
magick(ImageMagick 7) for image manipulation. It includes a specific security warning for Windows users to avoid theconvertcommand, which could inadvertently trigger a system utility. - [INDIRECT_PROMPT_INJECTION]: The skill processes external print TIFF files and verifies the status of remote URLs, creating a surface for indirect prompt injection if malicious data is embedded in image metadata or response headers.
- Ingestion points: Local TIFF master files and remote CDN URLs provided at runtime.
- Boundary markers: The skill suggests using the
-stripflag to remove metadata from processed images and recommends manual review of sample outputs before bulk processing. - Capability inventory: Shell command execution via ImageMagick, file system write operations for output images, and network operations via Python's
urllibto check URL existence. - Sanitization: Instructions include normalizing filenames to remove spaces or parentheses and stripping all embedded metadata and profiles from the final web images.
Audit Metadata