Security audit

Axiom Image Metadata Stripper

Security checks for vulnerabilities and agentic risk

Overview

This skill is a user-run image metadata stripping utility with no evidence of hidden network access, credential use, persistence, or destructive behavior beyond writing the requested output file.

Reasonable to install for local JPEG/PNG metadata stripping. Be aware the docs appear more ambitious than the implementation: GIF and directory processing are advertised but not actually implemented, and the Python example showing raw bytes does not match the file-path-based function signature.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.obfuscated_code

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: test_axiom_image_metadata_stripper.py:37