Ai Intelligent Image Generation

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:23 PM UTC
• Version:
  1.0.0

Overview

This appears to be a normal image-generation skill that sends user prompts and optional reference images to an external image API, with no evidence of hidden or destructive behavior.

Install only if you are comfortable sending image prompts and any reference images to the configured image-generation provider. Avoid using confidential, personal, regulated, or proprietary images unless you have reviewed the provider’s privacy and retention terms.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill advertises text-to-image and image-to-image generation using external services such as DALL-E API, but it does not warn users that prompts and uploaded images may be transmitted to third-party providers. This creates a real privacy and data-handling risk because users may submit sensitive images, personal data, or confidential business content without informed consent.

VirusTotal

65/65 vendors flagged this skill as clean.