toy-generator
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the 'craftsman-agent' 3D generation services through the 'OneKey Agent Gateway'. It defines clear input/output parameters for its three primary functions: design draft generation, task creation, and task polling.
- [SAFE]: All network operations are directed towards official and well-known endpoints associated with the service provider (agent.deepnlp.org and aiagenta2z.com). These communications are standard for a web-based AI service.
- [SAFE]: The skill requires an API key (
DEEPNLP_ONEKEY_ROUTER_ACCESS), but it correctly instructs the user to provide this via environment variables rather than hardcoding it, which is a standard security best practice. - [SAFE]: CLI examples use
npx onekey agent, which is the expected invocation pattern for this platform's skills. The arguments provided are structured JSON data matching the documented API schema. - [SAFE]: No obfuscation, remote code execution from untrusted sources, or persistence mechanisms were found. The skill does not attempt to access sensitive local files or escalate privileges.
Audit Metadata