image-editing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script
skills/shared/scripts/image_ops.pywith various subcommands such asresize,crop,pad,convert,compress,watermark,round,collage,thumbnail, andinfoto perform image manipulation as defined inSKILL.md. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied image files, which represents an ingestion point for potentially malicious data that could influence agent behavior if metadata or content is interpreted. \n - Ingestion points: User-provided image file paths are passed via the
-iparameter to theimage_ops.pyscript. \n - Boundary markers: There are no explicit instructions or delimiters defined to isolate the content of the processed images from the agent's control flow. \n
- Capability inventory: The skill performs subprocess execution of the
image_ops.pyscript for all its primary functions. \n - Sanitization: No validation or sanitization of the image content or metadata is specified in the instructions.
Audit Metadata