imagenCN
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard functionality for an image generation tool.
- Credential Management: It correctly instructs users to store API keys in environment variables (e.g., DASHSCOPE_API_KEY, ARK_API_KEY) rather than hardcoding them.
- Network Communication: Network operations are directed towards well-known, official API endpoints for established cloud providers (Alibaba Cloud, ByteDance Volcano Engine, Tencent Cloud, etc.).
- File Operations: The skill writes generated images to the local file system at user-specified or timestamped paths, which is its primary intended purpose.
- Prompt Engineering: It includes a 'Refine the prompt' workflow that encourages interactive user input, reducing the risk of unintended output and improving quality.
- Dependencies: Required packages (dashscope, requests, rich) are standard, well-maintained libraries.
Audit Metadata