Skip to content
skillsafebeta
← Report library
Purpose / Other

Higgsfield Marketplace Cards Skill Security Audit

What the author says it does (original text)

|

Independent security check

Do not install or run it yet

Files checked
1
Risks found
4
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 2
High risk

Runs a downloaded program right away

Source references: 1
What we found

This line runs the downloaded content without giving you a chance to read it first.

Why this matters

Once run, the downloaded program could read or change your files. The owner of the website can also replace the program without changing its URL.

This is an active installation instruction: when the CLI is absent from PATH, the agent downloads a GitHub-hosted script and immediately passes it to a shell. The remote script runs with the user's permissions and could access or modify files; the provided source has no review, checksum verification, or version pinning step. The risk arises if bootstrap installation is triggered and does not establish that the script is malicious. A user can require instructions only, or a pinned version with the script shown and verified first.

SKILL.md:26In the instructionsOpen original file
1. If `higgsfield` is not on `$PATH`, install it by running the official installer with Bash: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`.2. If `higgsfield account status` fails with authentication errors, ask the user to run `higgsfield auth login`.
High risk

A remote, unpinned installer is executed immediately when the CLI is missing

Source references: 1
What we found

The installation command pipes whatever GitHub currently returns as install.sh directly into a shell. The evidence provides no pinned commit, checksum, signature, or opportunity to inspect the script, so the executed content can change with the repository, response, or supply chain.

Why this matters

When installation is triggered, the remote script runs with the agent user's permissions. If replaced or compromised, it could read credentials, modify user files, or install persistent software. The supplied material does not establish that this has happened.

The stated supply-chain risk is supported. The installer URL follows the repository's current `main` branch and streams its response directly into `sh`; no commit hash, release tag, checksum, or review confirmation appears in the evidence. If the repository, release process, or response were compromised, the executed content could change and run with user privileges. “Unreviewed” is supported only in the sense that this Skill specifies no review step, not that nobody reviewed it or that the installer is compromised.

SKILL.md:26In the instructionsOpen original file
1. If `higgsfield` is not on `$PATH`, install it by running the official installer with Bash: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`.2. If `higgsfield account status` fails with authentication errors, ask the user to run `higgsfield auth login`.
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Product images and commercial context are submitted to a remote Higgsfield service

Source references: 2
What we found

The command accepts local images or upload IDs plus product, brand, category, and visual-style context, and the documentation states that the CLI calls a backend enhancer and creates generation jobs.

Why this matters

Once run, confidential prototypes, launch plans, brand direction, or product details may leave the device and be processed by a third party. The supplied material does not state retention, training use, access controls, or deletion procedures.

The workflow calls a remote backend and creates generation jobs, while its command accepts local image paths or upload IDs plus product, brand, category, and visual-style context. Running it therefore may transmit those assets or related content to Higgsfield, creating confidentiality risk for unreleased products, brand materials, or images. The source does not state the transmission scope, retention period, or backend data-use policy. Users can ask for those terms before upload and restrict inputs to authorized, sanitized material.

SKILL.md:21In the instructionsOpen original file
Create marketplace-ready product visuals with `higgsfield marketplace-cards create`.The CLI first calls the backend enhancer, where marketplace rules and templates are kept private, then creates `nano_banana_2` jobs and prints result URLs.
Show 1 other places
SKILL.md:68In the instructionsOpen original file
For common bundles, use `--scope <main|product-images|aplus|full-set>`, `--prompt "<short product and listing intent>"`, optional repeated `--image <path-or-upload-id>`, and optional context flags: `--product_context`, `--brand_context`, `--category`, `--visual_style`.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

Marketplace “compliance” is decided by an opaque backend while generation rationale is hidden by default

Source references: 4
What we found

The Skill claims compliant, sales-ready marketplace assets, but rules and prompt templates remain in a private backend. The agent must not author the final prompts and is told to omit enhanced prompts, job IDs, and internal model names from delivery, making it difficult to verify how product claims or platform requirements were interpreted.

Why this matters

If private templates are outdated, misread product attributes, or generate claims a platform rejects, a user may publish apparently finished images and face listing rejection, removal, consumer deception, or rework costs. The material does not establish compliance with any named marketplace policy.

The Skill describes outputs as “compliant” and “sales-ready,” but says compliance references and prompt templates are controlled by a private backend. The agent must not write the final prompts, and delivery hides enhanced prompts and job details by default. If a user relies on these images for platform rules or product claims, that opacity can obstruct verification and affect listing decisions. This supports a transparency and decision risk, not that the backend rules are wrong or that any marketplace will reject the output. Users can ask which platform and rule version apply and independently review claims and platform compliance.

SKILL.md:5In the instructionsOpen original file
description: |  Generate marketplace product image cards through Higgsfield: compliant  main image, secondary product images, and A+ style content modules. Use when  the user asks for marketplace listing images, product detail cards,  secondary product images, product infographics, lifestyle listing shots,  A+ style content, marketplace image sets, or sales-ready product visuals.  Backend owns marketplace compliance references and prompt templates; this skill  only routes user intent to the CLI.  NOT for generic brand product photography without marketplace/listing context
Show 3 other places
SKILL.md:34In the instructionsOpen original file
3. Prefer a product image. If the user provides only text or a URL, proceed only when the product details are clear.4. Do not write final image-generation prompts yourself. Backend enhancement owns that.5. Final answer should contain only the ready image URLs and short labels.
SKILL.md:88In the instructionsOpen original file
Avoid JSON, job IDs, internal model names, or enhanced prompt text unless the user explicitly asks.
SKILL.md:22In the instructionsOpen original file
Create marketplace-ready product visuals with `higgsfield marketplace-cards create`.The CLI first calls the backend enhancer, where marketplace rules and templates are kept private, then creates `nano_banana_2` jobs and prints result URLs.

Inside this skill

5 instruction sections

The Skill passes the user's product description, images, and brand/category context to the Higgsfield CLI; the CLI first calls a remote backend to enhance the request, then creates image-generation jobs and returns URLs.

View source
SKILL.md:21In the instructionsOpen original file
Create marketplace-ready product visuals with `higgsfield marketplace-cards create`.The CLI first calls the backend enhancer, where marketplace rules and templates are kept private, then creates `nano_banana_2` jobs and prints result URLs.
SKILL.md:68In the instructionsOpen original file
For common bundles, use `--scope <main|product-images|aplus|full-set>`, `--prompt "<short product and listing intent>"`, optional repeated `--image <path-or-upload-id>`, and optional context flags: `--product_context`, `--brand_context`, `--category`, `--visual_style`.

The Skill can generate one main image, a set with five secondary images, seven A+ modules, or a combined set; it also supports selecting custom asset types.

View source
SKILL.md:41In the instructionsOpen original file
| Scope | Creates ||---|---|| `main` | 1 marketplace main image || `product-images` | main image + 5 secondary images || `aplus` | main image + 7 A+ modules || `full-set` | main image + 5 secondary images + 7 A+ modules |
SKILL.md:48In the instructionsOpen original file
Use repeated `--asset` only for custom subsets:- `main_image`- `infographic`

If the CLI is absent, the instructions download a script from GitHub and immediately execute it with a shell; if account authentication fails, the user is asked to log in manually.

View source
SKILL.md:26In the instructionsOpen original file
1. If `higgsfield` is not on `$PATH`, install it by running the official installer with Bash: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`.2. If `higgsfield account status` fails with authentication errors, ask the user to run `higgsfield auth login`.
Start here · InstructionsSKILL.md
higgsfield-marketplace-cards
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:16In the instructionsOpen original file
argument-hint: "[--scope main|product-images|aplus|full-set] [prompt]"allowed-tools: Bash---
SKILL.md:26In the instructionsOpen original file
1. If `higgsfield` is not on `$PATH`, install it by running the official installer with Bash: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`.2. If `higgsfield account status` fails with authentication errors, ask the user to run `higgsfield auth login`.
Connect to websites
SKILL.md:26In the instructionsOpen original file
1. If `higgsfield` is not on `$PATH`, install it by running the official installer with Bash: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`.2. If `higgsfield account status` fails with authentication errors, ask the user to run `higgsfield auth login`.
SKILL.md:83In the instructionsOpen original file
Marketplace cards ready:- Main image: https://...- Infographic: https://...
SKILL.md:84In the instructionsOpen original file
- Main image: https://...- Infographic: https://...- Lifestyle: https://...
Lines read
89
File checksum (to compare versions)
719be5b6e3aef0672104deb9f89f6595ce048f7ced624099f6e56acb8ec8bb37