lightcraft-portrait-develop
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external resources and assets from GitHub repositories. This includes a runtime binary for the LightCraft CLI tool (v0.8.0) hosted at
github.com/storytold/lightcraftand documentation/workflow facts fromgithub.com/darktable-org/dtdocsandgithub.com/dpnkrpl/awesome-lightroom-presets. These are used for tool configuration and as reference material for the AI agent. - [COMMAND_EXECUTION]: The skill is designed to interact with the host system using the
command_runtool to invoke thelightcraft-cli.exe. It executes specific commands such ascatalog.query,library.select,develop.set, andapp.exportto perform photo editing tasks. The instructions emphasize verifying actual tool schemas and command availability before execution. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted external data.
- Ingestion points: The skill reads file metadata through
catalog.queryand imports external image files viaopen_fileand CLI import commands. - Boundary markers: None. There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious content embedded in image metadata or EXIF tags.
- Capability inventory: The skill possesses the ability to execute shell-level commands via
command_runand write files to the local file system using theapp.exportcommand. - Sanitization: Not detected. The provided instructions do not specify any validation or sanitization steps for data retrieved from external image files or their metadata.
Audit Metadata