gpt-image
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @zhoujinandrew/gpt-image-cli Node.js package from the npm registry to enable its core functionality.
- [COMMAND_EXECUTION]: The skill utilizes the gpt-image-cli binary to perform complex image generation and editing tasks, as well as to manage user configuration and API endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a multi-round optimization workflow where the agent is instructed to use the Read tool to inspect generated PNG files and use the visual results to formulate subsequent prompts. This creates a surface where instructions hidden within generated images could theoretically influence the agent's logic.
-
- Ingestion points: The agent reads generated PNG files from the ./refine/ directory.
-
- Boundary markers: The skill provides a structured four-part template for prompt reconstruction to maintain consistency.
-
- Capability inventory: The skill utilizes binary execution (gpt-image-cli) and file operations (Read, cp).
-
- Sanitization: No specific sanitization or filtering logic is defined for the content of the generated images before they are processed by the agent.
Audit Metadata