story-cover

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands including curl for network requests, jq for JSON processing, and image processing tools like magick or sips to handle book cover creation and resizing.
  • [EXTERNAL_DOWNLOADS]: The skill downloads content from user-provided URLs specified in the REF_IMAGE parameter in SKILL.md to use as reference material for image generation.
  • [INDIRECT_PROMPT_INJECTION]:
    • Ingestion points: The skill accepts user-supplied book titles, author names, and stylistic preferences in SKILL.md.
    • Boundary markers: Absent; user input is interpolated directly into English prompt templates.
    • Capability inventory: The skill has network access (curl), file system access (mkdir, cp), and image processing capabilities (magick, sips) across its scripts in SKILL.md.
    • Sanitization: The skill uses jq to properly escape user input when constructing API payloads, mitigating traditional command injection, though the generated prompt remains an injection surface for the image model.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 06:24 AM