pruna-run
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include patterns for executing shell commands to interact with the vendor's generative API.
- Evidence:
references/pruna-api.mdprovidescurltemplates for uploading local files, polling prediction status, and downloading results. - Evidence:
references/staged-generation-gate.mdreferences the execution of Python scripts for pipeline management, such aspython3 ./scripts/run_from_plan.py. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading generated binary assets from the vendor's cloud storage.
- Evidence:
references/pruna-api.mddescribes retrieving media fromhttps://api.pruna.aivia authenticatedcurlrequests. - [DATA_EXFILTRATION]: The skill transmits local file content to an external service as part of its core functionality.
- Evidence:
references/pruna-api.mdexplains how to perform multipart form uploads of local images or audio tohttps://api.pruna.ai/v1/files. This transmission is directed to the official API of the skill's author and is required for the intended image-to-video and avatar generation tasks.
Audit Metadata