技能 higgsfield-product-photoshoot
📦

higgsfield-product-photoshoot

v0.12.0 內容修訂 r1 嚴重 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

使用 Higgsfield 建立產品攝影作品

產品團隊需要多種格式的活動圖片，而不必撰寫複雜的圖片提示詞。此技能會引導選擇、呼叫 Higgsfield，並傳回完成的圖片 URL。

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 差

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "higgsfield-product-photoshoot" from https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot.md and its manifest at https://skillstore.io/api/skills/higgsfield-ai-higgsfield-product-photoshoot/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/higgsfield-ai-higgsfield-product-photoshoot.md 已簽名 manifest GET /api/skills/higgsfield-ai-higgsfield-product-photoshoot/manifest 已簽名 lockfile GET /api/skills/higgsfield-ai-higgsfield-product-photoshoot/lockfile

測試它

正在使用「higgsfield-product-photoshoot」。 一位電商經理上傳精華液瓶身照片，並要求三張可用於 Shopify 的棚拍圖片。

預期結果:

此技能會詢問數量、氛圍、使用通路和品牌顏色，然後在工作完成時傳回圖片 URL。

正在使用「higgsfield-product-photoshoot」。 一位行銷人員使用上傳的包裝圖片，要求為零食品牌製作付費社群套組。

預期結果:

此技能會選擇廣告素材套組模式，並傳回一組協調一致的圖片 URL 供活動測試使用。

正在使用「higgsfield-product-photoshoot」。 一位設計師上傳既有蠟燭圖片，並要求製作聖誕版本。

預期結果:

此技能會使用重新風格化模式，保留蠟燭，並傳回具備所要求季節性視覺的圖片 URL。

安全審計

嚴重
v6 • 2026/7/9 開啟版本化報告

Most static detections are false positives from Markdown code spans for modes, options, and sample output. The real issues are the curl-to-shell installer, Bash CLI execution, and local image auto-upload to an external backend. No prompt injection attempt was found in SKILL.md.

1
已掃描檔案
216
分析行數
8
複核項目
0
已忽略的誤報

已確認的安全問題 (2)

嚴重
SKILL.md:35
Pipe to shell pattern
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh
The command pipes a downloaded script directly to sh. This is a classic remote code execution installation pattern.
中
SKILL.md:138-146SKILL.md:175
Local Product Images Auto-uploaded to External Backend
The skill says local image paths are auto-uploaded, and generation submits data through the Higgsfield CLI. This can disclose product assets without clear upload consent.
Line 175 explicitly says local file paths are auto-uploaded. Lines 138-146 show the CLI submits generation data to the backend.
能力複核項目 (8)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

嚴重
SKILL.md:34-36
Ruby/shell backtick execution
```bash
The fenced bootstrap command downloads a remote installer and executes it with sh. That gives the remote script shell execution on the user host.
高
SKILL.md:35
Hardcoded URL
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh
The URL points to a remote installer that is piped into sh. A changed or compromised installer would execute code on the user host.
中
SKILL.md:138-140
Ruby/shell backtick execution
Single command. Backend assembles the final prompt and submits to `gpt_image_2`. URLs print on stdou
This section directs a single CLI command that submits prompt data to an external backend. The Bash and network workflow is security relevant.
中
SKILL.md:140-147
Ruby/shell backtick execution
```bash
The command block invokes higgsfield with user-derived prompt text and optional image paths. It runs an external CLI and sends data to a backend.
中
SKILL.md:151-157
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it normalizes external command execution and upload.
中
SKILL.md:159-164
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it still demonstrates external command execution and upload.
中
SKILL.md:166-171
Ruby/shell backtick execution
```bash
The example runs the Higgsfield CLI with a local image file. It is intended, but it still demonstrates external command execution and upload.
中
SKILL.md:175-179
Ruby/shell backtick execution
`--image` accepts a local file path (auto-uploaded) OR an existing upload UUID. Repeat the flag for
This line says local image paths are auto-uploaded through the CLI. That can disclose local files if paths are not user-selected and confirmed.

風險因素

⚙️ 外部命令 (50)
SKILL.md:27 SKILL.md:33 SKILL.md:34-36 SKILL.md:36-37 SKILL.md:37 SKILL.md:52-53 SKILL.md:53-54 SKILL.md:54-55 SKILL.md:55-56 SKILL.md:56-57 SKILL.md:57-58 SKILL.md:58-59 SKILL.md:59-60 SKILL.md:60-61 SKILL.md:61-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69-70 SKILL.md:70-71 SKILL.md:71-72 SKILL.md:72-73 SKILL.md:73-74 SKILL.md:74-75 SKILL.md:75-76 SKILL.md:76-79 SKILL.md:79-80 SKILL.md:80-81 SKILL.md:81-82 SKILL.md:82-90 SKILL.md:90-91 SKILL.md:91-92 SKILL.md:92-112 SKILL.md:112-114 SKILL.md:114-115 SKILL.md:115-120 SKILL.md:120-123 SKILL.md:123-124 SKILL.md:124-131 SKILL.md:131-138 SKILL.md:138-140 SKILL.md:140-147 SKILL.md:147-151 SKILL.md:151-157 SKILL.md:157-159 SKILL.md:159-164 SKILL.md:164-166 SKILL.md:166-171 SKILL.md:171-175 SKILL.md:175-179 SKILL.md:179-181
🌐 網路存取 (4)
SKILL.md:35 SKILL.md:197 SKILL.md:198 SKILL.md:199
📁 檔案系統存取 (3)
SKILL.md:197 SKILL.md:198 SKILL.md:199

偵測到的模式

Pipe to shell pattern
審計單位: codex 檢視審計紀錄 →
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-product-photoshoot/security.svg)](https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/higgsfield-ai-higgsfield-product-photoshoot/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/higgsfield-ai-higgsfield-product-photoshoot.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

higgsfield-ai. (2026). higgsfield-product-photoshoot security audit report (audit version 6) [Author version 0.12.0]. Skillstore. https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6

BibTeX 引用

@techreport{higgsfield-ai-higgsfield-ai-higgsfield-product-photoshoot-2026, author = {higgsfield-ai}, title = {higgsfield-product-photoshoot security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6}, note = {Author version 0.12.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "higgsfield-product-photoshoot security audit report (audit version 6)" version: "0.12.0" type: report authors: - name: "higgsfield-ai" date-released: "2026-07-09" url: "https://skillstore.io/skills/higgsfield-ai-higgsfield-product-photoshoot/audits/6" identifiers: - type: other value: "skillstore:higgsfield-ai-higgsfield-product-photoshoot:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據 證據置信度: 中
55
架構
100
可維護性
87
內容
67
社群
91
規範符合度

你可以打造什麼

推出商店產品圖片

為產品詳細資訊頁面和上市系列建立乾淨的棚拍與生活風格圖片。

建立付費社群素材變體

為 Meta、TikTok、Pinterest 或 Google 活動產生協調一致的靜態廣告素材。

探索季節性品牌視覺

為季節性活動重新風格化既有產品照片，同時保留主要產品主體。

試試這些提示

簡易棚拍照片 
Create three clean studio product photos for this uploaded bottle. Use a white background, soft shadows, and Shopify square format.
生活風格產品場景 
Generate a lifestyle scene for this coffee bag on a sunlit kitchen counter. Make three images for Instagram feed use.
廣告素材套組 
Build a five-slide paid social ad creative pack for this skincare product. Highlight hydration, premium packaging, and calm colors.
受控重新風格化 
Restyle this existing product image for a winter campaign. Preserve the label, package shape, and product placement.

最佳實務

  • 當標籤準確性和包裝忠實度很重要時，請上傳清晰的產品圖片。
  • 在產生前說明使用通路、數量和氛圍，以減少後續追問。
  • 在將產品素材傳送到外部服務之前，請確認任何本機圖片上傳。

避免

  • 不要將此技能用於缺少產品或品牌情境的原始 text-to-image 請求。
  • 不要使用直接圖片模型命令繞過 product-photoshoot 工作流程。
  • 不要在開始工作前詢問超過四個訪談問題。

常見問題

這需要 Higgsfield 帳戶嗎？
是。此技能需要 Higgsfield CLI 和已驗證的 Higgsfield 帳戶。
此技能會撰寫最終圖片提示詞嗎？
不會。它會將簡短的意圖描述傳送給 Higgsfield，並由後端建立最終提示詞。
我可以使用本機產品圖片嗎？
可以。此技能接受本機圖片路徑或 upload ID，然後 Higgsfield 會上傳該素材。
它可以建立哪些圖片類型？
它支援棚拍照片、生活風格場景、特寫、pins、橫幅、輪播、廣告套組、模特兒試穿、概念和重新風格化。
它會建立產品影片嗎？
不會。它會建立靜態產品圖片。請使用相關的 Higgsfield 產生技能處理影片或虛擬人像工作流程。
我可以選擇長寬比嗎？
可以。除非你要求支援的長寬比，否則此技能會使用模式預設值。

開發者詳細資訊

授權

MIT

作者版本

v0.12.0

Skillstore 修訂

r1

儲存庫

https://github.com/higgsfield-ai/skills/tree/main/higgsfield-product-photoshoot/

引用

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

維護新鮮度

2026/7/18

使用量

12 次下載 · 23 次瀏覽

檔案結構

📄 SKILL.md