build-photo-editor
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and project scaffolds from official vendor sources.
- Fetches authoritative documentation from
https://banuba.com/ve-pe-sdk/llms-full.txtto ensure up-to-date API usage. - Clones official integration samples for Android, iOS, Flutter, and React Native from the
github.com/Banubaorganization. - [COMMAND_EXECUTION]: The skill executes standard package management and environment setup commands based on the target platform.
- Executes
pod install,npm install, andflutter pub getwithin the cloned project directories to resolve dependencies. - Utilizes the
xcodeprojRuby gem to programmatically modify iOS project files (.pbxproj), which is a standard practice for automating iOS builds. - [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation from the vendor to guide its code generation logic.
- Ingestion points: Reads instructions and API definitions from
https://banuba.com/ve-pe-sdk/llms-full.txt(SKILL.md). - Boundary markers: The agent is explicitly instructed to treat this remote file as the authoritative source for all generated code.
- Capability inventory: The skill has the ability to write code files, execute shell commands (pod, npm, git), and access the network to fetch documentation.
- Sanitization: Content is treated as trusted technical documentation provided by the vendor; no additional sanitization is performed on the text content before processing.
Audit Metadata