Skill Trust Decision
image-generation-guide
A legitimate image generation guide with documented shell execution and file cleanup risks that are acknowledged in skill-card.md.
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
curl|sh installation pattern +10
Present in guide but targets legitimate ollama.com; common but risky pattern
Hidden file cleanup behavior +12
flux-gen removes $HOME/*.png without clear prominence in SKILL.md (only in skill-card.md)
Most important evidence
Medium RCE
Remote script execution via curl|sh
The full-guide.md includes `curl -fsSL https://ollama.com/install.sh | sh` which executes remote code. While the source is legitimate (ollama.com), this pattern is inherently dangerous and not declared in SKILL.md.
guide/full-guide.md:71 Prefer package managers (brew) or manual verification before execution. Document this in SKILL.md if intentional.
Low Doc Mismatch
Undeclared file cleanup behavior
The flux-gen script removes PNG files from $HOME without warning. This hidden functionality is only documented in skill-card.md 'Known Risks' section, not in SKILL.md.
scripts/flux-gen:25 Either document this in SKILL.md or modify the script to only clean its own output directory.
Info Sensitive Access
Accesses user home directory for output
The script creates and manages files in ~/Pictures/OpenClaw and searches /tmp and $HOME for generated images.
scripts/flux-gen:12 This is expected behavior for an image generation tool; not a security issue.
Declared capability vs actual capability
Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md declares shell.exec; guide:71 shows curl|sh pattern Filesystem Pass
Declared NONE
→ Inferred WRITE
flux-gen:25-26 removes $HOME/*.png files Network Pass
Declared READ
→ Inferred READ
SKILL.md declares http.request; curl downloads from ollama.com Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://ollama.com/install.sh | sh guide/full-guide.md:71
Medium External URL
https://thesolai.github.io/guides/signet-ai.html README.md:170
Medium External URL
https://thesolai.github.io/guides/openclaw-skills-guide.html README.md:171
Medium External URL
https://ollama.com/install.sh guide/full-guide.md:71
Medium External URL
https://discord.gg/ollama guide/full-guide.md:301
Medium External URL
https://ollama.com/blog/image-generation guide/full-guide.md:342
Medium External URL
https://blackforestlabs.ai/ guide/full-guide.md:343
Medium External URL
https://clawhub.ai/user/amrree skill-card.md:7
Medium External URL
https://clawhub.ai/amrree/skills/image-gen-guide skill-card.md:27
Dependencies and supply chain
There are no structured dependency warnings.
File composition
7 files · 741 lines
Markdown 5 files · 684 linesOther 1 files · 52 linesJSON 1 files · 5 lines
Files of concern · 4
guide/full-guide.md Remote script execution via curl|sh · curl -fsSL https://ollama.com/install.sh | sh · https://ollama.com/install.sh · https://discord.gg/ollama · https://ollama.com/blog/image-generation · https://blackforestlabs.ai/
README.md https://thesolai.github.io/guides/signet-ai.html · https://thesolai.github.io/guides/openclaw-skills-guide.html
skill-card.md https://clawhub.ai/user/amrree · https://clawhub.ai/amrree/skills/image-gen-guide
scripts/flux-gen Undeclared file cleanup behavior · Accesses user home directory for output
Other files · prompts.md · SKILL.md · _meta.json
Security positives
No credential harvesting or API key theft observed
No data exfiltration or C2 communication detected
No base64 obfuscation or anti-analysis techniques
No access to sensitive paths like ~/.ssh, ~/.aws, or .env
No reverse shell or remote code execution backdoors
Known risks are documented in skill-card.md
Uses legitimate Ollama infrastructure (ollama.com)
No malicious dependencies or supply chain risks