photocraft-restore-old-photo
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a bundled Python script (
scripts/repair_plan.py) to generate repair plans and provides templates for executing an external command-line tool (photocraft-cli). These operations are necessary for the skill's primary function of photo editing. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied coordinates and metadata from JSON files (
local-repair-input.json). It mitigates potential injection risks through a helper script that validates input dimensions and enforces 'protected regions' where no changes are allowed, preventing unintended modification of sensitive image features.
Audit Metadata