automatic1111
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Stable Diffusion WebUI source code and extensions (ControlNet, Adetailer, Regional Prompter) from official GitHub repositories.
- [EXTERNAL_DOWNLOADS]: Downloads a large-scale language model from Hugging Face's official model hub, which is a trusted organization for AI assets.
- [COMMAND_EXECUTION]: Executes the
webui.shscript to initialize and run the web application on the local machine. This is the standard procedure for this software. - [INDIRECT_PROMPT_INJECTION]: The skill processes text prompts provided by the user to generate images. While prompts are interpreted by the model, the resulting actions are limited to local file generation and API responses within the local network context.
- Ingestion points: Prompts entered into the
payloaddictionary in the Python API examples (SKILL.md). - Boundary markers: None explicitly defined in the API wrappers.
- Capability inventory: Local file system writes (
Path.write_bytes) for saving generated images and local network requests to the WebUI API. - Sanitization: None implemented in the provided code snippets, which is standard for demonstration API clients.
Audit Metadata