p-image-try-on
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied image URLs and optional prompt text to generate new image content.
- Ingestion points: The
person_image,garment_images, andpromptfields are used as inputs for image generation predictions as described inSKILL.md. - Boundary markers: There are no specific instructions to use delimiters or ignore embedded instructions within the provided images or prompts.
- Capability inventory: The skill performs network HTTP requests to the vendor's API (
api.pruna.ai) for file uploads and prediction generation. - Sanitization: The skill does not describe explicit sanitization, filtering, or validation steps for the external image data or prompt strings before they are sent to the AI model.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install prerequisite and related skills from the
PrunaAI/pruna-skillsGitHub repository using thenpx skills addcommand.
Audit Metadata