From a0c5f511f2ea8da1baa599422c33f34e1dfda16d Mon Sep 17 00:00:00 2001
From: AI Agent <agent@example.com>
Date: Sat, 18 Jul 2026 09:02:03 +0000
Subject: [PATCH] feat: Add strict 500KB performance guardrail for image
 parsing

---
 skills/utils/image-analyzer.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/skills/utils/image-analyzer.js b/skills/utils/image-analyzer.js
index 07075b2..cc7c1a5 100644
--- a/skills/utils/image-analyzer.js
+++ b/skills/utils/image-analyzer.js
@@ -5,6 +5,10 @@ const zlib = require('zlib');
  * Zero external dependencies. Fully standard PNG unfiltering compliance.
  */
 function parsePNG(buffer) {
+  if (buffer.length > 512000) {
+    throw new Error('Image buffer exceeds the 500KB performance budget.');
+  }
+
   // Check standard PNG signature: 89 50 4E 47 0D 0A 1A 0A
   if (buffer.readUInt32BE(0) !== 0x89504E47 || buffer.readUInt32BE(4) !== 0x0D0A1A0A) {
     throw new Error('Invalid PNG signature.');