Skip to content
skillsafebeta
← Report library
Purpose / Other

Gpt Image 2 Skill Security Audit

What the author says it does (original text)

Create or edit images with Pilio GPT Image 2 through the unified Pilio developer API. Use when the user wants text-to-image generation, prompt-based image editing, restyling, product-photo transformation, or composition from one or more local reference images.

Independent security check

Do not install or run it yet

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
High risk

An unpinned remote npm package executes locally with access to the API key

Source references: 4
What we found

Every workflow uses `pnpm dlx @pilio/cli` without pinning a package version or verifying its contents. `pnpm dlx` can download and execute whichever package the registry serves at that time, in an environment containing `PILIO_API_KEY`. The evidence does not show malicious code, but updates, account compromise, or dependency compromise would directly affect users.

Why this matters

The package runs with the current user's permissions and could read accessible files and environment variables, modify the workspace, or transmit data, including the Pilio key.

The workflow requires PILIO_API_KEY and downloads/executes an unversioned `@pilio/cli` through `pnpm dlx`. The CLI can normally read inherited environment variables, so a later-compromised package, maintainer account, or dependency could expose the key or abuse local permissions. The evidence does not show that the package is malicious. Users can ask for a pinned, verified version or run it in isolation with a restricted, revocable key.

SKILL.md:10In the instructionsOpen original file
Require `PILIO_API_KEY` in the environment. Do not ask the user to paste API keys into the conversation.
Show 3 other places
SKILL.md:17In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --prompt "<prompt>" --aspect-ratio "1:1"```
SKILL.md:23In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --input ./reference.png --prompt "<edit prompt>"```
SKILL.md:37In the instructionsOpen original file
```bashpnpm dlx @pilio/cli task wait <task_id>```
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Local reference images are uploaded into a third-party Pilio workflow

Source references: 3
What we found

The Skill explicitly points `--input` at local images and says the CLI handles uploads. With multiple references, every selected file may leave the machine. The instructions provide no retention, training-use, access-control, or deletion terms.

Why this matters

If an input contains faces, customer assets, unreleased products, document screenshots, or embedded metadata, that information may be disclosed to Pilio and its upstream image-model service.

Uploading reference images is an expected, disclosed part of this image-editing service, not hidden behavior: the CLI is said to handle uploads, and `--input` may name multiple local files. When a user runs the edit/composition command, those images are sent to Pilio for processing. The supplied material gives no retention, training-use, access-control, or deletion terms, creating a privacy risk for sensitive images. Users can request the data policy and submit only authorized, sanitized images.

SKILL.md:8In the instructionsOpen original file
Use the Pilio CLI so upload, polling, credits, and API errors stay consistent with the official SDK.
Show 2 other places
SKILL.md:23In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --input ./reference.png --prompt "<edit prompt>"```
SKILL.md:28In the instructionsOpen original file
- `--input`: local reference image path. Repeat for multiple references.- `--aspect-ratio`: `1:1`, `3:2`, `2:3`, `3:4`, `4:3`, `4:5`, `5:4`, `16:9`, `9:16`, `21:9`, or `auto`.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The Skill sends image-generation and editing requests through Pilio and requires `PILIO_API_KEY` to be present in the environment.

View source
SKILL.md:8In the instructionsOpen original file
Use the Pilio CLI so upload, polling, credits, and API errors stay consistent with the official SDK.Require `PILIO_API_KEY` in the environment. Do not ask the user to paste API keys into the conversation.

Text generation, reference-image editing, and task polling are all performed through `pnpm dlx @pilio/cli` commands.

View source
SKILL.md:17In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --prompt "<prompt>" --aspect-ratio "1:1"```
SKILL.md:23In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --input ./reference.png --prompt "<edit prompt>"```
SKILL.md:37In the instructionsOpen original file
```bashpnpm dlx @pilio/cli task wait <task_id>```

The editing workflow accepts one or more local reference images, and the instructions explicitly say the CLI handles uploads.

View source
SKILL.md:8In the instructionsOpen original file
Use the Pilio CLI so upload, polling, credits, and API errors stay consistent with the official SDK.
SKILL.md:20In the instructionsOpen original file
Edit or compose from one or more references:```bashpnpm dlx @pilio/cli gpt-image-2 --input ./reference.png --prompt "<edit prompt>"```
SKILL.md:28In the instructionsOpen original file
- `--input`: local reference image path. Repeat for multiple references.- `--aspect-ratio`: `1:1`, `3:2`, `2:3`, `3:4`, `4:3`, `4:5`, `5:4`, `16:9`, `9:16`, `21:9`, or `auto`.
Start here · InstructionsSKILL.md
gpt-image-2
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Read keys or account settings
SKILL.md:10In the instructionsOpen original file
Require `PILIO_API_KEY` in the environment. Do not ask the user to paste API keys into the conversation.
Connect to websites
SKILL.md:12In the instructionsOpen original file
Try the same workflow online first: https://pilio.ai/
Run commands
SKILL.md:16In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --prompt "<prompt>" --aspect-ratio "1:1"
SKILL.md:22In the instructionsOpen original file
```bashpnpm dlx @pilio/cli gpt-image-2 --input ./reference.png --prompt "<edit prompt>"
SKILL.md:36In the instructionsOpen original file
```bashpnpm dlx @pilio/cli task wait <task_id>
Lines read
39
File checksum (to compare versions)
d22df14a5728aac12f2009fc4a33aede2c8ec2bbce7e956b1a9f2440afc12a7a