higgsfield-generate

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the @higgsfield/cli package globally using npm if it is missing from the environment. This is a standard setup procedure for skills that wrap external CLI tools and targets a well-known service associated with the skill's primary purpose.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute higgsfield CLI commands. It employs standard shell practices, including using mktemp for temporary file creation and printf for generating JSON payloads, to pass complex arguments to the underlying service. These actions are transparent and consistent with the skill's documented functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 08:12 PM