技能 higgsfield-product-photoshoot
📦

higgsfield-product-photoshoot

v0.12.0 内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

使用 Higgsfield 创建产品拍摄图

产品团队需要多种格式的营销活动图片，而无需编写复杂的图像提示词。此技能会引导选择、调用 Higgsfield，并返回完成后的图片 URL。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "higgsfield-product-photoshoot" from https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot.md and its manifest at https://skillstore.io/api/skills/higgsfield-ai-higgsfield-product-photoshoot/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/higgsfield-ai-higgsfield-product-photoshoot.md 已签名 manifest GET /api/skills/higgsfield-ai-higgsfield-product-photoshoot/manifest 已签名 lockfile GET /api/skills/higgsfield-ai-higgsfield-product-photoshoot/lockfile

测试它

正在使用“higgsfield-product-photoshoot”。 一位电商经理上传了一张精华液瓶照片，并请求生成三张适用于 Shopify 的影棚图。

预期结果:

该技能会询问数量、氛围、使用渠道和品牌颜色，然后在任务完成后返回图片 URL。

正在使用“higgsfield-product-photoshoot”。 一位营销人员使用上传的包装图片，请求为零食品牌生成付费社交广告包。

预期结果:

该技能选择广告创意包模式，并返回一组协调一致的图片 URL，用于营销活动测试。

正在使用“higgsfield-product-photoshoot”。 一位设计师上传一张现有蜡烛图片，并请求生成圣诞版本。

预期结果:

该技能使用重塑风格模式，保留蜡烛，并返回具有所请求季节性视觉的图片 URL。

安全审计

严重
v6 • 2026/7/9 打开版本化报告

Most static detections are false positives from Markdown code spans for modes, options, and sample output. The real issues are the curl-to-shell installer, Bash CLI execution, and local image auto-upload to an external backend. No prompt injection attempt was found in SKILL.md.

1
已扫描文件
216
分析行数
8
复核项
0
已忽略误报

已确认安全问题 (2)

严重
SKILL.md:35
Pipe to shell pattern
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh
The command pipes a downloaded script directly to sh. This is a classic remote code execution installation pattern.
中
SKILL.md:138-146SKILL.md:175
Local Product Images Auto-uploaded to External Backend
The skill says local image paths are auto-uploaded, and generation submits data through the Higgsfield CLI. This can disclose product assets without clear upload consent.
Line 175 explicitly says local file paths are auto-uploaded. Lines 138-146 show the CLI submits generation data to the backend.
能力复核项 (8)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

严重
SKILL.md:34-36
Ruby/shell backtick execution
```bash
The fenced bootstrap command downloads a remote installer and executes it with sh. That gives the remote script shell execution on the user host.
高
SKILL.md:35
Hardcoded URL
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh
The URL points to a remote installer that is piped into sh. A changed or compromised installer would execute code on the user host.
中
SKILL.md:138-140
Ruby/shell backtick execution
Single command. Backend assembles the final prompt and submits to `gpt_image_2`. URLs print on stdou
This section directs a single CLI command that submits prompt data to an external backend. The Bash and network workflow is security relevant.
中
SKILL.md:140-147
Ruby/shell backtick execution
```bash
The command block invokes higgsfield with user-derived prompt text and optional image paths. It runs an external CLI and sends data to a backend.
中
SKILL.md:151-157
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it normalizes external command execution and upload.
中
SKILL.md:159-164
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it still demonstrates external command execution and upload.
中
SKILL.md:166-171
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it still demonstrates external command execution and upload.
中
SKILL.md:175-179
Ruby/shell backtick execution
`--image` accepts a local file path (auto-uploaded) OR an existing upload UUID. Repeat the flag for
This line says local image paths are auto-uploaded through the CLI. That can disclose local files if paths are not user-selected and confirmed.

风险因素

⚙️ 外部命令 (50)
SKILL.md:27 SKILL.md:33 SKILL.md:34-36 SKILL.md:36-37 SKILL.md:37 SKILL.md:52-53 SKILL.md:53-54 SKILL.md:54-55 SKILL.md:55-56 SKILL.md:56-57 SKILL.md:57-58 SKILL.md:58-59 SKILL.md:59-60 SKILL.md:60-61 SKILL.md:61-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69-70 SKILL.md:70-71 SKILL.md:71-72 SKILL.md:72-73 SKILL.md:73-74 SKILL.md:74-75 SKILL.md:75-76 SKILL.md:76-79 SKILL.md:79-80 SKILL.md:80-81 SKILL.md:81-82 SKILL.md:82-90 SKILL.md:90-91 SKILL.md:91-92 SKILL.md:92-112 SKILL.md:112-114 SKILL.md:114-115 SKILL.md:115-120 SKILL.md:120-123 SKILL.md:123-124 SKILL.md:124-131 SKILL.md:131-138 SKILL.md:138-140 SKILL.md:140-147 SKILL.md:147-151 SKILL.md:151-157 SKILL.md:157-159 SKILL.md:159-164 SKILL.md:164-166 SKILL.md:166-171 SKILL.md:171-175 SKILL.md:175-179 SKILL.md:179-181
🌐 网络访问 (4)
SKILL.md:35 SKILL.md:197 SKILL.md:198 SKILL.md:199
📁 文件系统访问 (3)
SKILL.md:197 SKILL.md:198 SKILL.md:199

检测到的模式

Pipe to shell pattern
审计者: codex 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-product-photoshoot/security.svg)](https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-product-photoshoot/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/higgsfield-ai-higgsfield-product-photoshoot.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

higgsfield-ai. (2026). higgsfield-product-photoshoot security audit report (audit version 6) [Author version 0.12.0]. Skillstore. https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6

BibTeX 引用

@techreport{higgsfield-ai-higgsfield-ai-higgsfield-product-photoshoot-2026, author = {higgsfield-ai}, title = {higgsfield-product-photoshoot security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6}, note = {Author version 0.12.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "higgsfield-product-photoshoot security audit report (audit version 6)" version: "0.12.0" type: report authors: - name: "higgsfield-ai" date-released: "2026-07-09" url: "https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6" identifiers: - type: other value: "skillstore:higgsfield-ai-higgsfield-product-photoshoot:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
100
可维护性
87
内容
67
社区
91
规范符合性

你能构建什么

发布商店产品图片

为产品详情页和发布系列创建干净的影棚图和生活方式图片。

制作付费社交变体

为 Meta、TikTok、Pinterest 或 Google 营销活动生成协调一致的静态广告创意。

探索季节性品牌视觉

在保留主要产品主体的同时，为季节性营销活动重塑现有产品图的风格。

试试这些提示

简单影棚图 
Create three clean studio product photos for this uploaded bottle. Use a white background, soft shadows, and Shopify square format.
生活方式产品场景 
Generate a lifestyle scene for this coffee bag on a sunlit kitchen counter. Make three images for Instagram feed use.
广告创意包 
Build a five-slide paid social ad creative pack for this skincare product. Highlight hydration, premium packaging, and calm colors.
受控风格重塑 
Restyle this existing product image for a winter campaign. Preserve the label, package shape, and product placement.

最佳实践

  • 当标签准确性和包装保真度很重要时，上传清晰的产品图片。
  • 在生成前说明使用渠道、数量和氛围，以减少后续问题。
  • 在将产品资产发送到外部服务之前，确认任何本地图片上传。

避免

  • 不要将此技能用于没有产品或品牌上下文的原始文本生成图片请求。
  • 不要使用直接图像模型命令绕过 product-photoshoot 工作流。
  • 开始任务前，不要询问超过四个访谈问题。

常见问题

这需要 Higgsfield 账户吗？
是。该技能需要 Higgsfield CLI 和已认证的 Higgsfield 账户。
该技能会编写最终图像提示词吗？
不会。它会向 Higgsfield 发送简短的意图描述，由后端构建最终提示词。
我可以使用本地产品图片吗？
可以。该技能接受本地图片路径或上传 ID，然后 Higgsfield 会上传该资产。
它可以创建哪些图片类型？
它支持影棚图、生活方式场景、特写、pins、横幅、轮播、广告包、模特试穿、概念图和风格重塑。
它会创建产品视频吗？
不会。它创建静态产品图片。请使用相关的 Higgsfield 生成技能来处理视频或头像工作流。
我可以选择宽高比吗？
可以。除非你请求受支持的 aspect ratio，否则该技能会使用模式默认值。

开发者详情

许可证

MIT

作者版本

v0.12.0

Skillstore 修订

r1

仓库

https://github.com/higgsfield-ai/skills/tree/main/higgsfield-product-photoshoot/

引用

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

维护新鲜度

2026/7/18

使用量

12 次下载 · 23 次浏览

文件结构

📄 SKILL.md

higgsfield-ai 的更多技能

查看全部

相关技能

查看全部