zenmux-image-generation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation, prompt cookbooks, and model metadata from external repositories and API endpoints.\n
- Evidence:
scripts/refresh_references.shdownloads reference markdown files fromraw.githubusercontent.com/ZenMux/zenmux-doc/andraw.githubusercontent.com/YouMind-OpenLab/.\n - Evidence:
scripts/list_models.shfetches live model catalogs fromzenmux.ai.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user prompts and reference image data, which are then used to build instructions for image generation models. This creates a surface where embedded instructions in the input could potentially influence agent behavior.\n - Ingestion points: User-provided prompt text and reference image URLs/paths processed in
SKILL.mdandscripts/image-common.ts.\n - Boundary markers:
SKILL.mdprovides instructions for the agent to optimize prompts using specific scene/subject ordering and restating invariants.\n - Capability inventory: The skill calls
zenmux.aiAPIs and writes files to the project's.contextdirectory viascripts/generate-openai.tsandscripts/generate-gemini.ts.\n - Sanitization: Input filenames are sanitized using the
slugifyObjectNamehelper inscripts/image-common.ts.\n- [COMMAND_EXECUTION]: Executes local scripts to manage the workspace and perform generation tasks.\n - Evidence:
SKILL.mdinstructs the agent to runnodeandbashscripts located in thescripts/directory, such asworkspace.mjsandrefresh_references.sh.
Audit Metadata