logo-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to the vendor's API endpoint (
eachsense-agent.core.eachlabs.run) to process logo generation tasks. These operations are essential to the skill's core functionality and target the author's own infrastructure. - [CREDENTIALS_UNSAFE]: The skill correctly uses an environment variable (
$EACHLABS_API_KEY) for authentication in its code examples, which is a recommended security practice for managing secrets. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided descriptions to generate media, which introduces a surface for indirect instructions.
- Ingestion points: User-provided text strings are passed into the
messagesfield of the API request payload inSKILL.mdexamples. - Boundary markers: No explicit delimiters or boundary instructions are included in the provided prompt examples.
- Capability inventory: The skill uses
curlto communicate with theeachlabs.rundomain. - Sanitization: The documentation references a 'Content policy violation' error, indicating that sanitization and safety filtering are handled by the server-side API.
Audit Metadata