build-photo-editor

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation and project scaffolds from official vendor sources.
  • Fetches authoritative documentation from https://banuba.com/ve-pe-sdk/llms-full.txt to ensure up-to-date API usage.
  • Clones official integration samples for Android, iOS, Flutter, and React Native from the github.com/Banuba organization.
  • [COMMAND_EXECUTION]: The skill executes standard package management and environment setup commands based on the target platform.
  • Executes pod install, npm install, and flutter pub get within the cloned project directories to resolve dependencies.
  • Utilizes the xcodeproj Ruby gem to programmatically modify iOS project files (.pbxproj), which is a standard practice for automating iOS builds.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation from the vendor to guide its code generation logic.
  • Ingestion points: Reads instructions and API definitions from https://banuba.com/ve-pe-sdk/llms-full.txt (SKILL.md).
  • Boundary markers: The agent is explicitly instructed to treat this remote file as the authoritative source for all generated code.
  • Capability inventory: The skill has the ability to write code files, execute shell commands (pod, npm, git), and access the network to fetch documentation.
  • Sanitization: Content is treated as trusted technical documentation provided by the vendor; no additional sanitization is performed on the text content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 07:06 AM
Security Audit — agent-trust-hub — build-photo-editor