Agent skill · Audited from source
higgsfield
skill · OSideMedia/higgsfield-ai-prompt-skillMIT licenceAudited 21 Oct 2026 · source d34324c95b96
Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit d34324c95b96 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 11 findings, 3 critical or high. What it does: Use this skill whenever the user asks anything about Higgsfield AI — writing or refining video/image prompts, choosing a model (Kling, Veo, Wan, Seedance, Minimax Hailuo, DoP, Soul, Nano Banana, Seedream, Flux, GPT…
Cite
Cite this page
ModelsAtlas. “higgsfield (OSideMedia/higgsfield-ai-prompt-skill)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/osidemedia/higgsfield-ai-prompt-skill
Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 3 critical or high findings, starting with “Prompt injection” in skills/higgsfield-stack/SKILL.md:28. Do not install it without reading them.
Trust audit
Audit 0.4.1 · source read 21 Oct 2026
BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesNot pinnedSome versions float
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 3 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 7 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.
Findings (11)
CRITICALPrompt injectionprompt.transfer_instruction · skills/higgsfield-stack/SKILL.md:28
| **Higgsfield CLI** | Binary distributed at https://github.com/higgsfield-ai/cli. Binary names: `higgsfield`, `higgs`, `hf`. Install via `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cl
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
HIGHPrompt injectionprompt.hide_from_user · skills/higgsfield-facs/SKILL.md:100
(`../higgsfield-seedance/SKILL.md` § Prompt-Craft Laws). Never tell the user a
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
HIGHPrompt injectionprompt.hide_from_user · skills/higgsfield-recall/SKILL.md:114
- Do not tell the user "I removed X because it was blocked before" unless they ask —
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
MEDIUMSupply chainprompt.pipe_to_shell · skills/higgsfield-stack/SKILL.md:28
| **Higgsfield CLI** | Binary distributed at https://github.com/higgsfield-ai/cli. Binary names: `higgsfield`, `higgs`, `hf`. Install via `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cl
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWInsecure cryptocrypto.weak_hash · scripts/higgsfield_memory.py:919
"prompt_hash": (hashlib.sha1(args.prompt.strip().encode("utf-8"))- Why
- No further detail recorded for this rule.
- Fix
- —
LOWInsecure cryptocrypto.weak_hash · scripts/seedance_lint.py:1427
"prompt_hash": hashlib.sha1(
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainsupply.unpinned · requirements.txt
fpdf2
- Why
- 1 requirement(s) not pinned with ==
- Fix
- pin exact versions
LOWPrompt injectionprompt.authority_framing · skills/higgsfield-assist/SKILL.md:190
- Full access to all models
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainprompt.pipe_to_shell · CHANGELOG.md:396
the CLI pinned and checksum-verified instead of `curl | sh`.
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainprompt.pipe_to_shell · README.md:67
- Install: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh` or `brew install higgsfield-ai/tap/higgsfield`
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha d34324c95b96 · 21 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- PublisherOSideMedia GitHub userOwner of the repository this skill is read from
- Source folderOSideMedia/higgsfield-ai-prompt-skillThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdictd34324c95b96A new audit runs when the source changes
- Repository statusNot archivedLast push 24 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use this skill whenever the user asks anything about Higgsfield AI — writing or refining video/image prompts, choosing a model (Kling, Veo, Wan, Seedance, Minimax Hailuo, DoP, Soul, Nano Banana, Seedream, Flux, GPT…
--- name: higgsfield description: > Use this skill whenever the user asks anything about Higgsfield AI — writing or refining video/image prompts, choosing a model (Kling, Veo, Wan, Seedance, Minimax Hailuo, DoP, Soul, Nano Banana, Seedream, Flux, GPT Image, etc.), camera controls, named motion presets, Soul ID character consistency, Cinema Studio 2.5/3.0, Vibe Motion, troubleshooting failed generations, credit optimization, Photodump, or any mention of higgsfield.ai. Also trigger on generic "write me a video prompt" or "make me an AI video prompt" requests when Higgsfield is the user's configured platform. user-invocable: true metadata: tags: [higgsfield, video, image, prompt, cinematic, AI, filmmaking, motion, camera] version: 3.40.0 updated: 2026-09-26 author: O-Side Media license: MIT --- # Higgsfield AI Prompt Skill **Language rule:** Reply in whatever language the user writes in. --- ## HARD RULES — pre-delivery checklist These rules apply to every Higgsfield response. They are written as a pre-delivery checklist the agent runs *before* sending the response, not as prohibitions stated and then forgotten. The failure mode they prevent is **plausibility-over-verification** — producing a response that looks correct because the agent's training data knows the rough shape of Higgsfield work, rather than because the agent actually read the skill files and verified the platform's ground truth. **Before delivering any Higgsfield response, confirm in this order:** 1. **Routing line present.** First line of response names which sub-skills you routed to (e.g. "Routing to higgsfield-prompt + higgsfield-camera for an Atmosphere push-in"). One line, then the work. Missing routing line = response is incomplete; add it. 2. **Routed sub-skills opened and read in this conversation.** Match the user's ask to the routing table below, open the matching sub-skill files with the read tool, and READ them. Root `SKILL.md` and `skills/higgsfield-prompt/SKILL.md` are mandatory at minimum on any prompt request. Grepped snippets do not satisfy this rule. Full reads do. If your only access to root `SKILL.md` or `skills/higgsfield-prompt/SKILL.md` in this conversation came from grep results, you have not satisfied this rule — open the file. Platform vocabulary, preset names, and model parameters must come from the files because this platform's lineup changes between releases. 3. **Named vocabulary verified, not invented.** Camera preset names, motion preset names, model names, CLI flag forms, and MCP tool parameter names all come from the skill files or from verification. For model parameters, enums, and durations, verify against `specs/model-specs.yaml` first — it is generated from a dated `models_explore` snapshot (see `snapshot_date` inside the file); if the snapshot is stale (>30 days), verify live instead (`higgsfield model get <model>` for CLI param schemas; `models_explore` for MCP). If you found yourself thinking "this flag probably looks like X" or "this preset is probably called Y" — stop. Read the file or run the verification command. Plausibility is not validity. Do not substitute generic video-prompt vocabulary for named Higgsfield presets; do not invent model versions, camera presets, or motion-preset names. If the user names one you don't see in the skill files, say so and ask for clarification. 4. **MCSLA structure intact on video prompts.** Model · Camera · Subject · Look · Action. Five layers, every video prompt, unless the user explicitly opted out. 5. **Shared negative constraints appended.** Pull positive-phrasing prevention phrases from `skills/shared/negative-constraints.md`. Do not paraphrase from training; use the exact phrasing from the file. (Kling 3.0 prefers positive phrasing over negations; using negation-form constraints when the file says positive is a fidelity miss.) 6. **Preflight surfaced when applicable.** If execution intent is signaled (CLI / MCP / bundled-skills mentioned) AND a video-class or high-cost model is named OR a budget concern is named, surface the two-step preflight (`model get` / `models_explore` for schema, then cost estimate). See `skills/higgsfield-stack/SKILL.md` § Preflight discipline. 7. **Aspect ratio is an enum, not a free-form value.** Check the model's allowed ratios against `specs/model-specs.yaml` before writing them into the header; if the snapshot is stale (>30 days), verify live via schema (`models_explore` / `model get`). Example of why this matters: Seedance 2.0 supports native 21:9, Kling 3.0 does not. Anamorphic / 2.35:1 / 2.39:1 are *style register* vocabulary for the Look line, not output ratios. See `vocab.md` § Aspect Ratio: output spec vs. style register. In a multi-shot Seedance sequence whose location plates carry a baked lens, whether the optics words still belong in the video prompt (Style Prefix included) is OPEN — one studio drops them, Hell Grind keeps the look in both (`skills/higgsfield-seedance/SKILL.md` § Bake it into the asset; `skills/shared/house-rulings.md` P2-6). 8. **Prompt under 200 words — short-form regime only.** Soft cap from MCSLA section. Going over is a signal you're padding rather than locking — tighten. **Regime exception:** block-scaffold production prompts (`skills/higgsfield-seedance/SKILL.md` § Official Prompt Architecture) replace the word cap with structural lint — harvested production Seedance briefs run 218–2,059-word medians depending on register `[FIELD — 13-project community harvest, 2026-07-18]`. The cap governs single-shot MCSLA prompts; a block-scaffold prompt over 200 words is not a rule-8 violation. **If any of items 1–8 are missing or unverified, the response is incomplete. Complete them before sending, not after.** --- ## What Is Higgsfield? Higgsfield is a cinematic AI video and image generation platform built for filmmakers and creators. Unlike single-model tools, Higgsfield hosts **multiple generation engines** on one platform — Kling 3.0/3.0 Omni/
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit d34324c
git clone https://github.com/OSideMedia/higgsfield-ai-prompt-skill ~/.claude/skills/higgsfield
git clone https://github.com/OSideMedia/higgsfield-ai-prompt-skill git -C higgsfield-ai-prompt-skill checkout d34324c95b96
Commands as the repository documents them: shown, never run by us. Our verdict covers commit d34324c95b96 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Claude Desktop | Mentioned in its text, not tested | Skills for Claude Desktop · About Claude Desktop |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| GitHub Copilot | Mentioned in its text, not tested | Skills for GitHub Copilot · About GitHub Copilot |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
Audit history
Every audit, every source change
- ✕BLOCK D 69 / 100
first audit · source
d34324c95b96
Similar skills
OSideMedia/higgsfield-ai-prompt-skill
Use when the user asks about Moodboard, building a moodboard from reference images, curated moodboard presets, Soul Hex color transfer, applying a visual style direction to generations, or named moodboard styles like…
OSideMedia/higgsfield-ai-prompt-skill
Use when the user asks which model to use, wants to compare models, or needs guidance on selecting between Kling, Wan (incl. Wan 3.0), Seedance (incl. 2.5), Veo 3, Minimax Hailuo / MiniMax H3, FLUX 3 Video, Gemini Omni…
OSideMedia/higgsfield-ai-prompt-skill
Use when the user mentions Marketing Studio, DTC Ads, ad video, UGC video, the marketing_studio_video MCP model, or wants to generate one of the 9 Marketing Studio ad presets (UGC, Tutorial, Unboxing, Hyper Motion,…
OSideMedia/higgsfield-ai-prompt-skill
Use when the user asks about Mixed Media, wants to apply artistic preset styles to an image (Noir, Sketch, Paper, Canvas, Particles, Neon, etc.), combine multiple artistic treatments, or create stylized…
OSideMedia/higgsfield-ai-prompt-skill
Use when the user wants to generate a cinematic still image on Higgsfield, asks about shot framing, camera angle, or composition for image prompts, needs a specific shot type (close-up, wide shot, cowboy shot, etc.), or…
OSideMedia/higgsfield-ai-prompt-skill
Use when the user mentions GPT Image 2.0 or GPT Image 2.5, gpt-image-2, gpt-image-2.5, gpt_image_2_5, GPT-Image-2 prompts, the Flare / Sunburst variants, a transparent-background image, or wants to generate an image…
Questions about higgsfield
What does the higgsfield skill do?
Is higgsfield safe to install?
What can higgsfield access on my machine?
Which assistants does higgsfield work with?
How current is this page?
Sources
- github.com/OSideMedia/higgsfield-ai-prompt-skill — the audited source at commit d34324c95b96 and every finding aboveObserved · 21 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the higgsfield skill do?
- Is higgsfield safe to install?
- What can higgsfield access on my machine?