background-replace

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill's instructions or scripts.
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated media from the AI Hive API to the local '~/Downloads/AiHive' directory.
  • [COMMAND_EXECUTION]: The provided Python CLI interacts with the remote API to upload files and manage image generation tasks.
  • [PROMPT_INJECTION]: The skill ingests user prompts for image generation, which are processed by a remote AI model.
  • Ingestion points: The '--prompt' argument in 'scripts/imagegen.py'.
  • Boundary markers: Input is encapsulated in a JSON body for API transmission; no additional delimiters are used.
  • Capability inventory: The script performs network requests and writes downloaded files to the local disk.
  • Sanitization: No sanitization is applied to the prompt string before it is sent to the service.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:19 PM
Security Audit — agent-trust-hub — background-replace