undress-design-fashion-ai
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical integration guide for a fashion AI platform. All documented network operations are directed at the official service domains (undress.design, api.undress.design).
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill encourages standard security practices, such as managing API keys through environment variables and using bearer tokens for authentication. No attempts to access sensitive system files or exfiltrate data to unauthorized third-party domains were found.
- [REMOTE_CODE_EXECUTION]: The provided code examples use standard, well-known libraries (axios for Node.js, requests for Python) and do not involve piped shell executions, dynamic evaluation of untrusted input, or other RCE vectors.
- [OBFUSCATION]: The skill contains no hidden content, encoded strings, zero-width characters, or homoglyph attacks. All URLs and instructions are in plain, readable text.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external image data via URLs, it does not demonstrate a vulnerability to indirect injection. The instructions include specific parameters for consent verification and content filtering, and the agent does not interpret the resulting image data as instructions.
Audit Metadata