poster-design-generation

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFENO_CODECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [NO_CODE]: The skill consists entirely of Markdown documentation and reference materials without any bundled scripts or executable code.
  • [COMMAND_EXECUTION]: The documentation includes several curl command examples to demonstrate how users can interact with the poster generation API.
  • Evidence: Multiple examples in SKILL.md show POST requests to https://sense.eachlabs.run/chat using standard CLI tools.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources hosted on domains associated with the author, eachlabs.
  • Evidence: SKILL.md and references/SSE-EVENTS.md refer to sense.eachlabs.run, eachlabs.ai, and storage.eachlabs.ai for API endpoints and output storage.
  • [DATA_EXFILTRATION]: The skill describes the process of sending user-provided design prompts and reference image URLs to the vendor's API for processing.
  • Evidence: The API request examples in SKILL.md include JSON payloads with message and image_urls fields, which is the intended functional behavior for generating AI artwork.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 08:49 AM