nsfw-content-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides structured
curlcommand templates intended for execution to interact with the EachLabs API. These templates include instructions to use environment variables for authentication and specific flags to modify API behavior, such as disabling safety filters. - [INDIRECT_PROMPT_INJECTION]: The skill creates a vulnerability surface by ingesting untrusted data from users and external sources which is then passed to a remote generation engine.
- Ingestion points: The skill accepts natural language strings in the
messagesparameter and remote image references via theimage_urlsarray defined inSKILL.md. - Boundary markers: None provided; the instructions do not implement delimiters or guardrail prompts to prevent the agent from following instructions potentially embedded within user-supplied content or image metadata.
- Capability inventory: The skill performs network operations using
curlto transmit data to theeachsense-agent.core.eachlabs.runendpoint. - Sanitization: There is no evidence of input validation, filtering, or escaping for the user-provided descriptions or external image URLs before they are processed by the skill.
Audit Metadata