Skills
Navigate
skills/transloadit/skills/transform-build-mosaic-collage-with-transloadit/Gen Agent Trust Hub

transform-build-mosaic-collage-with-transloadit

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the official Transloadit CLI tool via npx to perform image merging. This command is part of the core functionality of the skill provided by the vendor.
  • [EXTERNAL_DOWNLOADS]: The skill triggers the download of the @transloadit/node package from the npm registry using npx -y. This is a verified dependency from the skill's author.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes multiple local image files provided as input paths.
  • Ingestion points: Image file paths provided via the --input flag in SKILL.md.
  • Boundary markers: None present for the file paths.
  • Capability inventory: Shell command execution via npx in SKILL.md.
  • Sanitization: No explicit sanitization or validation of the input paths or image content is mentioned in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:30 PM
Security Audit — agent-trust-hub — transform-build-mosaic-collage-with-transloadit