imagemagick-conversion
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration techniques were detected. The skill instructions are purely educational and focus on standard utility usage.
- [COMMAND_EXECUTION]: The skill guides the user through the execution of standard ImageMagick commands like
magick,mogrify, andidentify. These are used for legitimate image processing tasks. - [PROMPT_INJECTION]: The skill describes an attack surface for indirect prompt injection as it processes external image data. However, the risk is inherent to the tool usage rather than the skill instructions, and it encourages safe practices like shell quoting.
- Ingestion points: Local image files (SKILL.md)
- Boundary markers: CLI quoting recommended for wildcards (SKILL.md)
- Capability inventory: Shell execution of ImageMagick binaries (SKILL.md)
- Sanitization: Instructions provided to quote wildcards and test on single files first (SKILL.md)
Audit Metadata