venice-image-edit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines parameters for image editing and composition that ingest potentially untrusted data.
- Ingestion points: The
promptandimage(specificallyhttps://URL variants) fields in the API requests for/image/edit,/image/multi-edit, and/image/background-removeas described inSKILL.md. - Boundary markers: The skill uses structured JSON to delimit fields, but the content of the
promptand images is parsed by an AI model. - Capability inventory: The skill uses network capabilities (
curl) to interact with the externalapi.venice.aiservice. - Sanitization: The documentation highlights a
safe_modeparameter (defaulting totrue) provided by the platform to filter adult content, though this does not strictly prevent adversarial prompt instructions. - [COMMAND_EXECUTION]: The documentation includes multiple
curlcommand examples (e.g., in the/image/editand/image/upscalesections) to demonstrate API integration. These examples are standard for developer documentation and use environment variable placeholders ($VENICE_API_KEY) rather than hardcoded credentials.
Audit Metadata