The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were identified in the analyzed skill files.
[PROMPT_INJECTION]: The instructions do not contain any attempts to bypass safety filters or override agent behavior.
[DATA_EXFILTRATION]: No sensitive file access, hardcoded credentials, or unauthorized external network requests were detected.
[REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or unverified dependencies.
[COMMAND_EXECUTION]: The skill does not execute arbitrary shell commands or attempt privilege escalation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data via the brand_name, brief, and revision_notes fields. These inputs are used to construct prompts for image generation models (GPT Image, Midjourney, etc.). While this is an injection surface, it is within the expected functional scope of a logo generator and poses no direct risk to the host environment.
Ingestion points: User-provided inputs in input-schema.json (brand_name, brief, revision_notes).
Boundary markers: The instructions use structured sections but lack explicit delimiters for user input interpolation.
Capability inventory: Uses the imagegen tool to generate visual assets.
Sanitization: No specific input sanitization logic is implemented for the provided briefs.

logo-generator