bfl-api
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and code examples for interacting with the Black Forest Labs API endpoints, such as api.bfl.ai, for image generation tasks.
- [SAFE]: Secret management instructions correctly follow best practices by advising users to store API keys in .env files and adding them to .gitignore to prevent accidental credential exposure.
- [SAFE]: Network operations described in the cURL, Python, and TypeScript examples are directed to official API infrastructure or user-provided image URLs for processing purposes.
- [SAFE]: The provided code samples for webhook integration demonstrate secure implementation patterns, including the use of HMAC-SHA256 signature verification to ensure message integrity and authenticity.
Audit Metadata