generate-pindou

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run() in Python and spawnSync in Node.js to execute internal helper scripts (run_api.py and run_api.js). These executions are restricted to files bundled within the skill's own directory structure and are used for standard functional modularity.- [EXTERNAL_DOWNLOADS]: The skill communicates with the external endpoint agent.deepnlp.org to process user-provided prompts and image URLs. This network activity is necessary for the skill's primary function of generating bead patterns from a remote AI model.- [CREDENTIALS_UNSAFE]: The skill requires an API access key (DEEPNLP_ONEKEY_ROUTER_ACCESS) to be provided by the user via environment variables. The included scripts retrieve this environment variable to authenticate requests to the DeepNLP gateway, following standard security practices for secret management.- [DATA_EXPOSURE]: The skill processes user-supplied image URLs and text prompts. These are transmitted to the vendor's API gateway for processing. No evidence of unauthorized file access or sensitive data harvesting was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 01:55 PM
Security Audit — agent-trust-hub — generate-pindou