Cn Batch Image Editor

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 3:53 AM UTC
• Version:
  1.2.6

Overview

This is a straightforward local batch image tool that writes processed copies and does not show hidden network, credential, persistence, or destructive behavior.

Before using it on valuable images, run it on copies or keep backups, especially when setting --output manually, because processed files may overwrite existing names in the output folder and compression or conversion can reduce quality.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill instructs users to run batch compression, resizing, conversion, watermarking, and renaming across directories without warning about destructive outcomes such as overwriting files, renaming collisions, or irreversible quality loss. In the context of bulk file operations, omission of safety guidance increases the risk of accidental data loss because users may run commands against original image sets expecting non-destructive behavior.

VirusTotal

65/65 vendors flagged this skill as clean.