skills/wubin1836/ai-hive-agent-skills/gpt-image-2-text-to-image/Snyk

gpt-image-2-text-to-image

Warn

Audited by Snyk on Aug 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is the --prompt argument, which skill_generate() forwards as args.prompt into cmd_image(), and then client.generate_image(..., prompt=prompt) sends it to the /generation/image API at runtime.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 12, 2026, 12:18 PM

Issues

1

Security Audit — snyk — gpt-image-2-text-to-image