higgsfield
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation directs users to download installation assets and setup scripts from the Higgsfield AI GitHub repository.
- [REMOTE_CODE_EXECUTION]: Installation involves executing a setup script (
./setup) or usingnpx skills addto fetch and run remote packages for CLI and authentication setup. - [COMMAND_EXECUTION]: The
higgsfield-websitesskill utilizes shell commands (higgsfield website ...) to create repositories, manage git access, and deploy full-stack applications to Cloudflare infrastructure. - [DYNAMIC_EXECUTION]: The website construction feature involves building and deploying React 19 and TanStack Start applications, which requires runtime compilation and server-side deployment processes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts and media (photos for face training) to generate output.
- Ingestion points: User prompts for generation, face photos for Soul ID, and deployment configurations in
higgsfield-websites. - Boundary markers: None explicitly defined in the instruction markdown to delimit user input from skill logic.
- Capability inventory: Performs network API calls, shell command execution for deployments, and file-writing operations for website generation.
- Sanitization: Not explicitly documented; the skill relies on backend prompt enhancement for image and video jobs.
Audit Metadata