vtuber-avatar-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: All network operations and examples reference the vendor's own domains (
eachlabs.run,eachlabs.ai) for API endpoints and output storage. - [SAFE]: The skill follows security best practices by recommending the use of environment variables (
$EACHLABS_API_KEY) for authentication rather than hardcoding sensitive credentials. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined prompts to generate image descriptions. While this provides a surface for indirect prompt injection, it is the primary purpose of the tool, and the impact is contained within the vendor's API environment.
Audit Metadata