color-grade-transfer
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's implementation is transparent and follows security best practices for AI agent extensions. No malicious behaviors such as credential harvesting, obfuscation, or unauthorized network activity were found.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a specific, bundled Python script. This execution is scoped to the skill's primary function and does not allow for arbitrary command injection.
- [EXTERNAL_DOWNLOADS]: The skill interacts solely with official Google Cloud AI endpoints (Gemini API), which is the expected behavior for its stated purpose.
- [PROMPT_INJECTION]: The instructions given to the AI agent to act as a 'professional colorist' are part of the role-play necessary for the task and do not attempt to bypass system-level safety guardrails.
Audit Metadata