story-cover
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands including
curlfor network requests,jqfor JSON processing, and image processing tools likemagickorsipsto handle book cover creation and resizing. - [EXTERNAL_DOWNLOADS]: The skill downloads content from user-provided URLs specified in the
REF_IMAGEparameter inSKILL.mdto use as reference material for image generation. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill accepts user-supplied book titles, author names, and stylistic preferences in
SKILL.md. - Boundary markers: Absent; user input is interpolated directly into English prompt templates.
- Capability inventory: The skill has network access (
curl), file system access (mkdir,cp), and image processing capabilities (magick,sips) across its scripts inSKILL.md. - Sanitization: The skill uses
jqto properly escape user input when constructing API payloads, mitigating traditional command injection, though the generated prompt remains an injection surface for the image model.
- Ingestion points: The skill accepts user-supplied book titles, author names, and stylistic preferences in
Audit Metadata