higgsfield

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation directs users to download installation assets and setup scripts from the Higgsfield AI GitHub repository.
  • [REMOTE_CODE_EXECUTION]: Installation involves executing a setup script (./setup) or using npx skills add to fetch and run remote packages for CLI and authentication setup.
  • [COMMAND_EXECUTION]: The higgsfield-websites skill utilizes shell commands (higgsfield website ...) to create repositories, manage git access, and deploy full-stack applications to Cloudflare infrastructure.
  • [DYNAMIC_EXECUTION]: The website construction feature involves building and deploying React 19 and TanStack Start applications, which requires runtime compilation and server-side deployment processes.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts and media (photos for face training) to generate output.
  • Ingestion points: User prompts for generation, face photos for Soul ID, and deployment configurations in higgsfield-websites.
  • Boundary markers: None explicitly defined in the instruction markdown to delimit user input from skill logic.
  • Capability inventory: Performs network API calls, shell command execution for deployments, and file-writing operations for website generation.
  • Sanitization: Not explicitly documented; the skill relies on backend prompt enhancement for image and video jobs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:28 AM