tuzi-infographic
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of untrusted external data by ingesting user-provided content to generate infographic prompts.
- Ingestion points: Source content is read from a user-specified file path or pasted text into
source.md(Step 1.2). - Boundary markers: The
base-prompt.mdtemplate lacks clear delimiters or instructions to ignore embedded commands within the{{CONTENT}}variable. - Capability inventory: The skill can execute shell commands (
test,mv), write multiple files to the local system, and invoke other agent skills (image generation). - Sanitization: No input validation or escaping is applied to the source content before it is used in the prompt generation process.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to manage its environment and configuration.
- The agent is instructed to use
test -fto check for the existence ofEXTEND.mdin both the project root and the user's home directory within a vendor-specific hidden folder (.tuzi-skills). - Automated backup procedures involve renaming existing files, implying the use of filesystem manipulation commands like
mv.
Audit Metadata