remove-similar-image
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script that performs local file system operations, including file deletion and moving files to a trash directory. These operations are essential to the skill's primary purpose of cleaning photo folders and are guarded by a manual review process (requiring an explicit --apply flag).
- [EXTERNAL_DOWNLOADS]: The documentation and diagnostic commands suggest the installation of well-known, standard image processing libraries (Pillow, ImageHash, numpy, and opencv-python-headless) from official package registries.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local image files, which creates a potential surface for indirect injection via malicious image metadata.
- Ingestion points: Local files accessed via the
input_pathargument inscripts/remove_similar_images.py. - Boundary markers: None; the script performs deterministic image analysis and prints text/JSON results.
- Capability inventory: File deletion (
path.unlink) and movement (shutil.move) inscripts/remove_similar_images.py. - Sanitization: None; the script relies on standard libraries for parsing image data.
Audit Metadata