seamless-pattern-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly uses an environment variable (
$EACHLABS_API_KEY) for API authentication, avoiding hardcoded secrets and following best practices for credential management. - [SAFE]: All network operations are performed against official vendor-owned domains (
eachsense-agent.core.eachlabs.run,storage.eachlabs.ai, andeachlabs.ai) for the purpose of communicating with theeach::senseAI service. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input via the
messagesarray in API requests sent to the remote AI service. This constitutes a standard injection surface; however, the risk is mitigated as processing is handled by the vendor's remote infrastructure which is the primary intended function of the skill. - Ingestion points: User-provided content in the
messagesobject withinSKILL.mdexamples. - Boundary markers: None present in the prompt examples.
- Capability inventory: Network POST requests via
curltoeachlabs.runendpoints. - Sanitization: Not present in the client-side skill description; assumed to be handled by the remote AI endpoint.
Audit Metadata