dreamina-foreground-segmentation
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- EXTERNAL_DOWNLOADS (LOW): The skill makes network requests to
https://jimeng.jianying.com. This domain is not included in the trusted sources list. - DATA_EXFILTRATION (LOW): The skill transmits an
image_uriand a user-providedsessionid(via cookies) to an external domain. While this is necessary for the stated functionality, it involves the transfer of session-specific data to an external service. - INDIRECT_PROMPT_INJECTION (LOW): The skill has an ingestion point via the
image_uriparameter. - Ingestion points:
image_uriinforeground_segmentationfunction. - Boundary markers: None; the URI is interpolated directly into a JSON string within the
draft_contentobject. - Capability inventory:
requests.postused to send data externally. - Sanitization: None; the input is assumed to be a valid URI string.
Audit Metadata