higgsfield-product-photoshoot
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@higgsfield/clipackage from the npm registry to provide the necessary command-line tools for image generation. - [COMMAND_EXECUTION]: The skill employs the
Bashtool to interact with the Higgsfield service, including checking authentication status and executing theproduct-photoshoot createcommand. - [PROMPT_INJECTION]: The skill processes user-provided descriptions from the pre-generation interview and interpolates them into a shell command via the
--promptargument. This ingestion point represents a surface for indirect prompt injection or command injection, though the usage is central to the skill's purpose and utilizes boundary markers in the provided examples.
Audit Metadata