此报告尚无所请求语言的翻译，当前显示规范英文报告。

版本化安全评估

报告编号: SA-3E4B6C31

7/9/2026, 8:06:29 AM

higgsfield-product-photoshoot 安全评估 v6

Skill 安全认证报告

审计历史
审计模型: codex 最新发布的报告
技能名称
higgsfield-product-photoshoot
版本
v0.12.0
维护者
higgsfield-ai
来源
github.com/higgsfield-ai/skills/tree/main/higgsfield-product-photoshoot/
覆盖范围
1 已扫描文件 · 216 分析行数
策略版本
不可用

已确认问题的最高严重性

严重

有 2 个已确认的安全问题需要处理。

安装上下文

请查看当前 Skill 详情页

本页仅汇总报告证据。Skill 详情页提供 canonical install advisory。

打开当前 Skill 详情页

本报告不会阻止或授权 manifest 或 ZIP。

Most static detections are false positives from Markdown code spans for modes, options, and sample output. The real issues are the curl-to-shell installer, Bash CLI execution, and local image auto-upload to an external backend. No prompt injection attempt was found in SKILL.md.

报告位置

最新发布的报告

“最新”仅指报告序列，不代表 artifact 当前有效。

审计证明

无法签发证明

所需的不可变绑定不完整。

人工验证

未进行人工验证

本报告没有人工验证记录。

覆盖范围

1 已扫描文件 · 216 分析行数

有 10 项内容需要查看

局限

本报告不声称进行了运行时或沙箱执行，也不证明不存在副作用。

证据链

证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。

  1. 来源

    已绑定 commit 与路径

  2. 构件

    已绑定内容与 tree hash

  3. 审计

    已完成

  4. 安装契约

    打开 manifest 进行验证

    打开 manifest

观察到的能力

“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。

包含脚本

可能执行 Skill 随附的代码。

本次审计未记录

网络访问

可能连接外部服务。

在 4 个证据位置观察到

文件系统访问

可能读取或写入本地文件。

在 3 个证据位置观察到

环境变量

可能读取进程环境中的值。

本次审计未记录

外部命令

可能调用 Skill 之外的命令或程序。

在 50 个证据位置观察到

能力复核项 (8)
严重
SKILL.md:34-36
Ruby/shell backtick execution
```bash
The fenced bootstrap command downloads a remote installer and executes it with sh. That gives the remote script shell execution on the user host.
高
SKILL.md:35
Hardcoded URL
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh
The URL points to a remote installer that is piped into sh. A changed or compromised installer would execute code on the user host.
中
SKILL.md:138-140
Ruby/shell backtick execution
Single command. Backend assembles the final prompt and submits to `gpt_image_2`. URLs print on stdou
This section directs a single CLI command that submits prompt data to an external backend. The Bash and network workflow is security relevant.
中
SKILL.md:140-147
Ruby/shell backtick execution
```bash
The command block invokes higgsfield with user-derived prompt text and optional image paths. It runs an external CLI and sends data to a backend.
中
SKILL.md:151-157
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it normalizes external command execution and upload.
中
SKILL.md:159-164
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it still demonstrates external command execution and upload.
中
SKILL.md:166-171
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it still demonstrates external command execution and upload.
中
SKILL.md:175-179
Ruby/shell backtick execution
`--image` accepts a local file path (auto-uploaded) OR an existing upload UUID. Repeat the flag for
This line says local image paths are auto-uploaded through the CLI. That can disclose local files if paths are not user-selected and confirmed.

风险问题

已确认的安全问题与仍需审核的项目分开展示。

已确认安全问题 (2)

RISK-001 严重
SKILL.md:35
Pipe to shell pattern
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh
The command pipes a downloaded script directly to sh. This is a classic remote code execution installation pattern.
RISK-002 中
SKILL.md:138-146SKILL.md:175
Local Product Images Auto-uploaded to External Backend
The skill says local image paths are auto-uploaded, and generation submits data through the Higgsfield CLI. This can disclose product assets without clear upload consent.
Line 175 explicitly says local file paths are auto-uploaded. Lines 138-146 show the CLI submits generation data to the backend.

补救措施

本次审计记录了建议的修复措施。实施这些措施是维护者的责任。

  1. FIX-001
    严重
    Remote installer executes from a pipe to shell.
    Use a pinned package install, checksum verification, and explicit user confirmation before any install command runs.
  2. FIX-002
    中
    CLI commands run through Bash with user-supplied prompt and image paths.
    Validate mode, count, aspect ratio, and image paths before invoking Bash, and quote every argument.
  3. FIX-003
    中
    Local image paths are auto-uploaded to an external service.
    Ask users to confirm each file upload and warn that product images leave the local machine.
  4. FIX-004
    低
    Network and account requirements are easy to miss.
    Document that the skill requires Higgsfield authentication and sends data to Higgsfield services.

专家证据

不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。

Artifact 主体

Marketplace 提交
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
内容哈希
139c38f3b8a33a4ef37a1066850e4bcddc0976b4143cc6ea0c3b7ad9de3b3b9e
目录树哈希
73ad5e5e1f95ee2d06ed795efa4f16056c96a242dd31e5dd3a969bccea90abae
Skill 路径
skills/higgsfield-ai/higgsfield-product-photoshoot
审计载荷哈希
2493a41e774960991929dcbcd55886a5

分析元数据

审计模型: codex

分析状态: 已完成

范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。

验证与导出

JSON 报告 CITATION.cff SARIF 2.1.0 已签名安装清单 来源

manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。

审计证明: not_attestable