featured-image-creator
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides and executes shell commands using rsvg-convert to transform SVG files into PNG format.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by reading and parsing SVG files from local directories (~/Icons/ and ~/Downloads/).
- Ingestion points: Local SVG files in the graphics-inspirations and fontawesome-pro directories.
- Boundary markers: No specific delimiters or instructions are provided to the agent to disregard potential instructions embedded within the SVG file content.
- Capability inventory: Shell command execution via rsvg-convert and file system read access.
- Sanitization: The instructions focus on extraction of style and path data without explicit validation or sanitization of the input SVG content.
Audit Metadata