baoyu-article-illustrator
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted article content to identify key concepts for illustration.
- Ingestion points: Article content is read via
read_fileor processed from pasted text in the conversation (SKILL.md, references/workflow.md). - Boundary markers: The instructions lack explicit text delimiters to separate the untrusted article content from the agent's system instructions during analysis.
- Capability inventory: The skill generates images via the
image_generatetool and usesterminalandwrite_filefor file and network operations. - Sanitization: The skill includes a dedicated 'Pitfalls' section and core principles requiring the agent to 'Strip secrets' (scan for API keys, tokens, or credentials) before writing any output to disk.
- [COMMAND_EXECUTION]: The skill uses the terminal tool to perform standard file management and asset downloads.
- Evidence: The workflow specifies using
curlorwgetto download image assets from URLs provided by theimage_generatetool (references/workflow.md). - Evidence: Uses common shell commands such as
cpandmvfor reference management and creating file backups. - [EXTERNAL_DOWNLOADS]: The skill retrieves generated images from external URLs.
- Evidence: Downloads images from dynamic URLs generated by the image generation backend using standard network utilities.
Audit Metadata