packaging-design-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates communication with
eachsense-agent.core.eachlabs.runandstorage.eachlabs.aifor design generation and asset retrieval. These resources are owned by the vendor and are necessary for the skill's intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user descriptions and passes them to an external generation API, which constitutes a prompt injection surface. 1. Ingestion points: User-controlled strings within the
messagesfield of thecurlexamples inSKILL.md. 2. Boundary markers: Absent. There are no instructions provided to delimit user input from agent-provided instructions. 3. Capability inventory: Network connectivity to theeachlabs.runAPI endpoint. 4. Sanitization: None. The skill does not describe any methods for validating or escaping the user-provided design descriptions.
Audit Metadata