photocraft
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates over loopback (127.0.0.1) and uses a token-based authentication mechanism for the PhotoCraft control protocol, following security best practices.
- [SAFE]: Filesystem access is explicitly restricted to user-defined "read-root" and "write-root" directories via process arguments, preventing arbitrary file access or path traversal attacks by rejecting absolute paths and parent directory references.
- [SAFE]: Instructions correctly advise against exposing sensitive tokens in command-line arguments, recommending the use of private token files or environment variables to protect credentials.
- [SAFE]: The skill incorporates transport limits and request/reply ceilings (e.g., 1 MiB request, 8 MiB reply) within its protocol description to mitigate denial-of-service and resource exhaustion risks.
Audit Metadata