Agent skill · Audited from source

higgsfield

skill · OSideMedia/higgsfield-ai-prompt-skillMIT licenceAudited 21 Oct 2026 · source d34324c95b96

★ 770pushed 24 days agoversion 1.3.0
✕BLOCKGrade D · 69/100 · 11 findings · d34324c
770repo stars · whole OSideMedia/higgsfield-ai-prompt-skill

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit d34324c95b96 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 11 findings, 3 critical or high. What it does: Use this skill whenever the user asks anything about Higgsfield AI — writing or refining video/image prompts, choosing a model (Kling, Veo, Wan, Seedance, Minimax Hailuo, DoP, Soul, Nano Banana, Seedream, Flux, GPT…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “higgsfield (OSideMedia/higgsfield-ai-prompt-skill)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/osidemedia/higgsfield-ai-prompt-skill

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 3 critical or high findings, starting with “Prompt injection” in skills/higgsfield-stack/SKILL.md:28. Do not install it without reading them.

Trust audit

Audit 0.4.1 · source read 21 Oct 2026

Trust score69/100✕BLOCK D
1 critical2 high1 medium7 low0 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS1
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS3
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL7
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.

Findings (11)

CRITICALPrompt injectionprompt.transfer_instruction · skills/higgsfield-stack/SKILL.md:28
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
| **Higgsfield CLI** | Binary distributed at https://github.com/higgsfield-ai/cli. Binary names: `higgsfield`, `higgs`, `hf`. Install via `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cl
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
HIGHPrompt injectionprompt.hide_from_user · skills/higgsfield-facs/SKILL.md:100
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
(`../higgsfield-seedance/SKILL.md` § Prompt-Craft Laws). Never tell the user a
Why
asks the agent to act without the user's knowledge
Fix
—
HIGHPrompt injectionprompt.hide_from_user · skills/higgsfield-recall/SKILL.md:114
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Do not tell the user "I removed X because it was blocked before" unless they ask —
Why
asks the agent to act without the user's knowledge
Fix
—
MEDIUMSupply chainprompt.pipe_to_shell · skills/higgsfield-stack/SKILL.md:28
F-08 Supply chainCWE-829 · CWE-1357Layer L2
| **Higgsfield CLI** | Binary distributed at https://github.com/higgsfield-ai/cli. Binary names: `higgsfield`, `higgs`, `hf`. Install via `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cl
Why
No further detail recorded for this rule.
Fix
—
LOWInventory / provenanceinv.hidden_file · .markdownlint.json
F-13 Inventory / provenanceCWE-1104Layer L0
.markdownlint.json
Why
hidden member outside the usual dotfiles
Fix
review its purpose
LOWInsecure cryptocrypto.weak_hash · scripts/higgsfield_memory.py:919
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
"prompt_hash": (hashlib.sha1(args.prompt.strip().encode("utf-8"))
Why
No further detail recorded for this rule.
Fix
—
LOWInsecure cryptocrypto.weak_hash · scripts/seedance_lint.py:1427
F-09 Insecure cryptoCWE-327 · CWE-338Layer L1
"prompt_hash": hashlib.sha1(
Why
No further detail recorded for this rule.
Fix
—
LOWSupply chainsupply.unpinned · requirements.txt
F-08 Supply chainCWE-829 · CWE-1357Layer L1
fpdf2
Why
1 requirement(s) not pinned with ==
Fix
pin exact versions
LOWPrompt injectionprompt.authority_framing · skills/higgsfield-assist/SKILL.md:190
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Full access to all models
Why
No further detail recorded for this rule.
Fix
—
LOWSupply chainprompt.pipe_to_shell · CHANGELOG.md:396
F-08 Supply chainCWE-829 · CWE-1357Layer L2
the CLI pinned and checksum-verified instead of `curl | sh`.
Why
No further detail recorded for this rule.
Fix
—
LOWSupply chainprompt.pipe_to_shell · README.md:67
F-08 Supply chainCWE-829 · CWE-1357Layer L2
- Install: `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh` or `brew install higgsfield-ai/tap/higgsfield`
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha d34324c95b96 · 21 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • PublisherOSideMedia GitHub userOwner of the repository this skill is read from
  • Source folderOSideMedia/higgsfield-ai-prompt-skillThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdictd34324c95b96A new audit runs when the source changes
  • Repository statusNot archivedLast push 24 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use this skill whenever the user asks anything about Higgsfield AI — writing or refining video/image prompts, choosing a model (Kling, Veo, Wan, Seedance, Minimax Hailuo, DoP, Soul, Nano Banana, Seedream, Flux, GPT…

---
name: higgsfield
description: >
  Use this skill whenever the user asks anything about Higgsfield AI — writing or
  refining video/image prompts, choosing a model (Kling, Veo, Wan, Seedance,
  Minimax Hailuo, DoP, Soul, Nano Banana, Seedream, Flux, GPT Image, etc.), camera
  controls, named motion presets, Soul ID character consistency, Cinema Studio 2.5/3.0,
  Vibe Motion, troubleshooting failed generations, credit optimization, Photodump,
  or any mention of higgsfield.ai. Also trigger on generic "write me a video prompt"
  or "make me an AI video prompt" requests when Higgsfield is the user's configured
  platform.
user-invocable: true
metadata:
  tags: [higgsfield, video, image, prompt, cinematic, AI, filmmaking, motion, camera]
  version: 3.40.0
  updated: 2026-09-26
  author: O-Side Media
  license: MIT
---

# Higgsfield AI Prompt Skill

**Language rule:** Reply in whatever language the user writes in.

---

## HARD RULES — pre-delivery checklist

These rules apply to every Higgsfield response. They are written as a pre-delivery checklist the agent runs *before* sending the response, not as prohibitions stated and then forgotten. The failure mode they prevent is **plausibility-over-verification** — producing a response that looks correct because the agent's training data knows the rough shape of Higgsfield work, rather than because the agent actually read the skill files and verified the platform's ground truth.

**Before delivering any Higgsfield response, confirm in this order:**

1. **Routing line present.** First line of response names which sub-skills you routed to (e.g. "Routing to higgsfield-prompt + higgsfield-camera for an Atmosphere push-in"). One line, then the work. Missing routing line = response is incomplete; add it.

2. **Routed sub-skills opened and read in this conversation.** Match the user's ask to the routing table below, open the matching sub-skill files with the read tool, and READ them. Root `SKILL.md` and `skills/higgsfield-prompt/SKILL.md` are mandatory at minimum on any prompt request. Grepped snippets do not satisfy this rule. Full reads do. If your only access to root `SKILL.md` or `skills/higgsfield-prompt/SKILL.md` in this conversation came from grep results, you have not satisfied this rule — open the file. Platform vocabulary, preset names, and model parameters must come from the files because this platform's lineup changes between releases.

3. **Named vocabulary verified, not invented.** Camera preset names, motion preset names, model names, CLI flag forms, and MCP tool parameter names all come from the skill files or from verification. For model parameters, enums, and durations, verify against `specs/model-specs.yaml` first — it is generated from a dated `models_explore` snapshot (see `snapshot_date` inside the file); if the snapshot is stale (>30 days), verify live instead (`higgsfield model get <model>` for CLI param schemas; `models_explore` for MCP). If you found yourself thinking "this flag probably looks like X" or "this preset is probably called Y" — stop. Read the file or run the verification command. Plausibility is not validity. Do not substitute generic video-prompt vocabulary for named Higgsfield presets; do not invent model versions, camera presets, or motion-preset names. If the user names one you don't see in the skill files, say so and ask for clarification.

4. **MCSLA structure intact on video prompts.** Model · Camera · Subject · Look · Action. Five layers, every video prompt, unless the user explicitly opted out.

5. **Shared negative constraints appended.** Pull positive-phrasing prevention phrases from `skills/shared/negative-constraints.md`. Do not paraphrase from training; use the exact phrasing from the file. (Kling 3.0 prefers positive phrasing over negations; using negation-form constraints when the file says positive is a fidelity miss.)

6. **Preflight surfaced when applicable.** If execution intent is signaled (CLI / MCP / bundled-skills mentioned) AND a video-class or high-cost model is named OR a budget concern is named, surface the two-step preflight (`model get` / `models_explore` for schema, then cost estimate). See `skills/higgsfield-stack/SKILL.md` § Preflight discipline.

7. **Aspect ratio is an enum, not a free-form value.** Check the model's allowed ratios against `specs/model-specs.yaml` before writing them into the header; if the snapshot is stale (>30 days), verify live via schema (`models_explore` / `model get`). Example of why this matters: Seedance 2.0 supports native 21:9, Kling 3.0 does not. Anamorphic / 2.35:1 / 2.39:1 are *style register* vocabulary for the Look line, not output ratios. See `vocab.md` § Aspect Ratio: output spec vs. style register. In a multi-shot Seedance sequence whose location plates carry a baked lens, whether the optics words still belong in the video prompt (Style Prefix included) is OPEN — one studio drops them, Hell Grind keeps the look in both (`skills/higgsfield-seedance/SKILL.md` § Bake it into the asset; `skills/shared/house-rulings.md` P2-6).

8. **Prompt under 200 words — short-form regime only.** Soft cap from MCSLA section. Going over is a signal you're padding rather than locking — tighten. **Regime exception:** block-scaffold production prompts (`skills/higgsfield-seedance/SKILL.md` § Official Prompt Architecture) replace the word cap with structural lint — harvested production Seedance briefs run 218–2,059-word medians depending on register `[FIELD — 13-project community harvest, 2026-07-18]`. The cap governs single-shot MCSLA prompts; a block-scaffold prompt over 200 words is not a rule-8 violation.

**If any of items 1–8 are missing or unverified, the response is incomplete. Complete them before sending, not after.**

---

## What Is Higgsfield?

Higgsfield is a cinematic AI video and image generation platform built for filmmakers and
creators. Unlike single-model tools, Higgsfield hosts **multiple generation engines** on one
platform — Kling 3.0/3.0 Omni/

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit d34324c

git clone https://github.com/OSideMedia/higgsfield-ai-prompt-skill ~/.claude/skills/higgsfield

Commands as the repository documents them: shown, never run by us. Our verdict covers commit d34324c95b96 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
Claude DesktopMentioned in its text, not testedSkills for Claude Desktop · About Claude Desktop
CodexMentioned in its text, not testedSkills for Codex · About Codex
GitHub CopilotMentioned in its text, not testedSkills for GitHub Copilot · About GitHub Copilot
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✕BLOCK D 69 / 100

    first audit · source d34324c95b96

Similar skills

Higgsfield Moodboard✓SAFE

OSideMedia/higgsfield-ai-prompt-skill

Use when the user asks about Moodboard, building a moodboard from reference images, curated moodboard presets, Soul Hex color transfer, applying a visual style direction to generations, or named moodboard styles like…

★ 818Grade B
Higgsfield Models✓SAFE

OSideMedia/higgsfield-ai-prompt-skill

Use when the user asks which model to use, wants to compare models, or needs guidance on selecting between Kling, Wan (incl. Wan 3.0), Seedance (incl. 2.5), Veo 3, Minimax Hailuo / MiniMax H3, FLUX 3 Video, Gemini Omni…

★ 815Grade B
Higgsfield Marketing Studio✓SAFE

OSideMedia/higgsfield-ai-prompt-skill

Use when the user mentions Marketing Studio, DTC Ads, ad video, UGC video, the marketing_studio_video MCP model, or wants to generate one of the 9 Marketing Studio ad presets (UGC, Tutorial, Unboxing, Hyper Motion,…

★ 809Grade B
Higgsfield Mixed Media✓SAFE

OSideMedia/higgsfield-ai-prompt-skill

Use when the user asks about Mixed Media, wants to apply artistic preset styles to an image (Noir, Sketch, Paper, Canvas, Particles, Neon, etc.), combine multiple artistic treatments, or create stylized…

★ 809Grade B
Higgsfield Image Shots✓SAFE

OSideMedia/higgsfield-ai-prompt-skill

Use when the user wants to generate a cinematic still image on Higgsfield, asks about shot framing, camera angle, or composition for image prompts, needs a specific shot type (close-up, wide shot, cowboy shot, etc.), or…

★ 808Grade B
Higgsfield Gpt Image 2✓SAFE

OSideMedia/higgsfield-ai-prompt-skill

Use when the user mentions GPT Image 2.0 or GPT Image 2.5, gpt-image-2, gpt-image-2.5, gpt_image_2_5, GPT-Image-2 prompts, the Flare / Sunburst variants, a transparent-background image, or wants to generate an image…

★ 804Grade B

Questions about higgsfield

What does the higgsfield skill do?
Claude AI skill for cinematic Higgsfield AI prompts — 32 sub-skills covering Seedance 2.5 (omni-reference, video edit + extend) and 2.0, the Hell Grind feature-film pipeline, an acting system, Cinema Studio 2.5/3.0/3.5, MCSLA, Soul ID consistency, Kling 3.0 Motion Control, the DISCIPLINE framework,
Is higgsfield safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can higgsfield access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does higgsfield work with?
Its documentation mentions claude-code, claude-desktop, codex, copilot and cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (d34324c95b96), read on 2026-10-21. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.