generate-tesla-car-wraps

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious behavior or suspicious patterns were detected in the skill instructions or associated scripts. The skill performs its stated function of generating car wrap designs.
  • [DATA_EXPOSURE]: The skill utilizes an environment variable, DEEPNLP_ONEKEY_ROUTER_ACCESS, for API authentication. This is a recommended security practice compared to hardcoding user-specific secrets. The included demo key is a public-facing testing credential provided by the vendor.
  • [EXTERNAL_DOWNLOADS]: Dependencies such as @aiagenta2z/onekey-gateway and ai-agent-marketplace are vendor-managed resources or standard ecosystem packages required for the skill's operation.
  • [PROMPT_INJECTION]: The skill has an input surface for processing user-defined prompts and image URLs, which is essential for its image-generation capabilities.
  • Ingestion points: User input captured via --prompt and --images flags in the provided scripts.
  • Boundary markers: No specific boundary markers or delimiters are used for the input strings in the API payload.
  • Capability inventory: The skill communicates with the external endpoint https://agent.deepnlp.org/agent_router via POST requests.
  • Sanitization: The scripts include validation to ensure that provided image reference URLs use valid http or https protocols.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 02:40 PM
Security Audit — agent-trust-hub — generate-tesla-car-wraps