Security audit
imagen-4
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward RunAPI recipe for generating or editing images with Imagen 4, with disclosed authentication, network use, task submission, and output verification.
Before installing, confirm you are comfortable installing the RunAPI CLI, using or providing a RunAPI API key, and potentially submitting paid image-generation requests. The skill appropriately tells the agent to authenticate explicitly, submit only once by default, preserve task evidence, and verify downloaded image outputs.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.