layer
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to the official Layer AI MCP server at
https://mcp.app.layer.ai/mcpfor asset generation and management tasks. - [REMOTE_CODE_EXECUTION]: Provides instructions to install sibling skills using the command
npx skills add layerai/skills. This is an installation mechanism for the vendor's own suite of tools. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data sources (API responses for models, workspaces, and generation results). While this creates an ingestion surface for potentially untrusted data, it is a standard part of the skill's operational purpose and the skill includes specific checks for financial spend confirmation.
Audit Metadata