digital-twin-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with
eachsense-agent.core.eachlabs.runandstorage.eachlabs.ai, which are verified infrastructure domains belonging to the skill's author, eachlabs. - [SAFE]: Authentication is handled via the
$EACHLABS_API_KEYenvironment variable in the documentation examples, which is the recommended practice for secret management and prevents credential exposure. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data via
image_urlsand user-suppliedmessagesto generate digital twins. - Ingestion points: External images are fetched via URLs provided in the
image_urlsfield of the API request (SKILL.md). - Boundary markers: Data is isolated within a structured JSON payload, providing clear separation between instructions and data.
- Capability inventory: The skill uses network operations to communicate with the EachLabs API for image and video generation.
- Sanitization: The skill includes explicit guidance in the 'Error Handling' and 'Privacy & Consent' sections regarding content policy violations and the requirement for authorized use, which serves as a mitigation layer.
Audit Metadata