virtual-staging
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents interactions with the eachlabs API and storage infrastructure for virtual staging services. All external resources, including API endpoints (eachsense-agent.core.eachlabs.run) and storage (storage.eachlabs.ai), trace back to the vendor's official infrastructure.
- [COMMAND_EXECUTION]: The skill provides curl command examples for interacting with the EachLabs API. These are used for demonstration purposes and do not execute arbitrary local commands or scripts.
- [EXTERNAL_DOWNLOADS]: The skill references image URLs from example.com in its documentation and describes output URLs from the vendor's storage infrastructure. These references are used for illustrative purposes and media delivery.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user prompts and image URLs for processing by a remote AI model. While this represents a potential surface where untrusted data could be provided to the model, the skill is focused on image generation and does not have capabilities (like local file writing or arbitrary system command execution) that would make this surface exploitable for system compromise.
Audit Metadata