generate-pindou
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.run()in Python andspawnSyncin Node.js to execute internal helper scripts (run_api.pyandrun_api.js). These executions are restricted to files bundled within the skill's own directory structure and are used for standard functional modularity.- [EXTERNAL_DOWNLOADS]: The skill communicates with the external endpointagent.deepnlp.orgto process user-provided prompts and image URLs. This network activity is necessary for the skill's primary function of generating bead patterns from a remote AI model.- [CREDENTIALS_UNSAFE]: The skill requires an API access key (DEEPNLP_ONEKEY_ROUTER_ACCESS) to be provided by the user via environment variables. The included scripts retrieve this environment variable to authenticate requests to the DeepNLP gateway, following standard security practices for secret management.- [DATA_EXPOSURE]: The skill processes user-supplied image URLs and text prompts. These are transmitted to the vendor's API gateway for processing. No evidence of unauthorized file access or sensitive data harvesting was found.
Audit Metadata