garment-lifestyle-photography
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted product metadata and audience descriptions which are then interpolated into image generation prompts. This creates a surface for indirect prompt injection where malicious data could influence the image generation tool. 1. Ingestion points: The skill receives data through the
generate_garment_lifestyle_phototool schema, specifically thegarment_typeandtarget_audienceproperties. 2. Boundary markers: The skill uses a structured prompt template with clear section headers likeSCENE & CONTEXTandGARMENT (HERO PIECE)which provide some structural delimitation. 3. Capability inventory: The skill utilizes animageGenTooland accesses a remotegarment_imageURL. 4. Sanitization: There are no instructions for sanitizing, escaping, or validating the input data before it is included in the prompt construction.
Audit Metadata