lightcraft
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
lightcraft-cliand the mainLightCraftbinary to perform photo processing tasks. It executes subcommands such asrun,render,snapshot, andmergeto automate the application's engine.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of various image formats (JPEG, CR3, RAW, etc.) and XMP sidecar files, which can contain user-controlled metadata.\n - Ingestion points: The skill imports photos and reads XMP sidecars (
crates/engine/src/import.rs,crates/engine/src/sidecar.rs) to retrieve ratings, flags, and edit settings.\n - Boundary markers: There are no specific instructions or delimiters mentioned to prevent the agent from interpreting instructions potentially embedded within image metadata fields.\n
- Capability inventory: The agent has the capability to write files (exports), execute local CLI tools, and communicate with a local server on port 7980.\n
- Sanitization: The analysis did not find evidence of sanitization or filtering of external metadata content before it is processed by the agent's context.\n- [EXTERNAL_DOWNLOADS]: The skill documentation mentions the ability to download AI models for masking tasks (e.g., SAM 3 for Object/Describe masks) and the requirement for users to manually install weights for AI Denoising. These downloads are directed to the project's own infrastructure or established repositories.
Audit Metadata