magic-hour-body-swap
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and setup guides hosted on the author's GitHub repository (github.com/magichourhq/magic-hour-mcp) and official API documentation (docs.magichour.ai). These are standard vendor resources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external image files provided as file paths. While these are ingestion points for external data, the skill is specialized for image processing and does not perform unsafe text interpolation of the file content into instructions. 1. Ingestion points: assets.person_file_path and assets.scene_file_path in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: File uploads, project submission, and result monitoring via the Magic Hour MCP. 4. Sanitization: Absent.
Audit Metadata