portrait-enhancement
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user data, including images and natural language instructions, which is a standard surface for indirect prompt injection.
- Ingestion points: Natural language messages and image URLs (e.g.,
image_urls) provided by users to the API endpoint. - Boundary markers: The provided prompt examples use clear instructional patterns and specific constraints (e.g., "Keep the skin texture realistic") to guide AI behavior.
- Capability inventory: The skill utilizes network requests to the vendor's API and relies on the
each::senseAI model for processing. - Sanitization: The skill instructions emphasize maintaining realism and preserving identity, providing a conceptual framework for safe output, though technical sanitization is handled by the EachLabs platform.
- [DATA_EXFILTRATION]: The skill makes network requests to
eachsense-agent.core.eachlabs.runand referencesstorage.eachlabs.aifor output delivery. - Evidence: These domains belong to the skill author (eachlabs) and represent the legitimate infrastructure required for the skill's stated purpose of portrait enhancement.
Audit Metadata