shopify-feature-image
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill follows standard functional patterns for image generation and validation.
- [COMMAND_EXECUTION]: The skill uses a provided Python script (
validate_feature_image.py) to verify that images meet specific size (1600x900) and format (PNG/JPEG) requirements. Analysis of the script confirms it uses only standard Python libraries (struct,pathlib,argparse) and performs safe binary reading of file headers without network access or secondary process spawning. - [PROMPT_INJECTION]: The instructions are strictly task-oriented and do not contain any patterns typical of prompt injection, such as instructions to ignore safety guidelines or reveal system prompts.
- [DATA_EXFILTRATION]: No sensitive file access or network exfiltration patterns were found. The skill operates on user-provided application context and generates assets locally via standard tool calls.
Audit Metadata