pollinations-image-gen
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to the well-known Pollinations.ai API (
https://gen.pollinations.ai) to retrieve generated image data. This is the primary function of the skill and does not involve executing remote code. - [COMMAND_EXECUTION]: The agent is instructed to execute a local Node.js script (
scripts/generate.mjs) to handle parameters and API communication. This script is contained within the skill folder. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text as image prompts. It mitigates potential injection or malformed URL risks by using
encodeURIComponentfor path parameters andURLSearchParamsfor query parameters, ensuring the API request is constructed safely.
Audit Metadata