lov-professional-portrait
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied images to perform portrait editing. While this introduces a potential surface for adversarial content (such as hidden text or instructions within the image data), the skill includes robust mitigation strategies. These include explicit identity-preservation constraints in the prompt templates and a mandatory quality gate to verify the final output.
- Ingestion points: User-provided source photos are identified as the edit target in
SKILL.md(Step 1). - Boundary markers: Prompt templates in
references/prompts.mdexplicitly label the input as "Image 1 is the edit target and the sole identity reference" to prevent the model from interpreting image content as new instructions. - Capability inventory: The skill utilizes image viewing and generative raster-image editing tools, with no evidence of unnecessary network or filesystem access.
- Sanitization: A mandatory quality gate process is defined in
references/quality-gate.mdto check for identity drift, anatomical artifacts, and unrequested changes before delivery. - [EXTERNAL_DOWNLOADS]: The skill's documentation includes references to external repositories and assets for installation and case studies.
- Evidence:
README.mdprovidesgit cloneinstructions targetingexample.com, andcases/cases.jsonreferences image assets hosted onraw.githubusercontent.com. These are used for documentation and distribution purposes and do not involve runtime execution of untrusted code.
Audit Metadata