lens-studio-user-context
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill documents methods for accessing user-specific data, such as display names and friends lists, via the
UserContextSystemandFriendsComponent. These operations utilize the official Lens Studio API and are subject to the platform's built-in permission and user consent models. - [EXTERNAL_DOWNLOADS]: Code examples illustrate how to load remote Bitmoji assets and 3D scene objects using the
RemoteMediaModule. These assets are retrieved from Snapchat's trusted infrastructure using resource handles provided by the system-nativeBitmojiModule. - [SAFE]: The documentation includes a dedicated security section ('Common Gotchas') that identifies potential injection risks when using the
DynamicResponseComponent. It explicitly instructs developers to validate and sanitize unvalidated strings received from external users to ensure the security of the lens logic.
Audit Metadata