replicate-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text prompts for image generation and model training, which is an inherent feature of AI model integration.
- Ingestion points: User input via
GenerateRequestandFluxDevInputinSKILL.md. - Boundary markers: None; prompts are passed directly to the
replicateclient. - Capability inventory: The skill uses the Replicate API to generate images and manage model predictions.
- Sanitization: No specific sanitization is performed on the input prompts, relying on the model's own safety checkers (which are enabled by default in the provided code).
- [EXTERNAL_DOWNLOADS]: The skill references standard Python libraries to be installed from the official registry.
- Evidence: Instructions to install
replicate,httpx,python-dotenv, andpydantic. These are well-known packages for interacting with APIs and managing configurations. - [COMMAND_EXECUTION]: The documentation includes shell commands for local environment setup.
- Evidence:
pip installcommands and.envconfiguration steps are documented to guide the user in setting up the integration. These commands do not involve privilege escalation or suspicious execution patterns.
Audit Metadata