pexels-stock-photos
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform search queries and download image files from the Pexels API. - [DATA_EXPOSURE]: Authentication is handled via a
PEXELS_API_KEYenvironment variable, aligning with standard secret management practices. - [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON data from the Pexels API.
- Ingestion points: API responses from
https://api.pexels.com/v1/searchinSKILL.md. - Boundary markers: Instructions guide the agent to extract specific fields into a structured table, providing a natural boundary for external content.
- Capability inventory: The skill utilizes
curlfor network access and local file system writes inSKILL.md. - Sanitization: The skill includes instructions to URL-encode user queries before making API calls.
Audit Metadata