The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were identified in the analyzed file. The skill provides standard documentation and examples for interacting with a text-to-image API.
[COMMAND_EXECUTION]: The skill uses curl to interact with the external EachLabs API. This is the primary method for the skill's functionality and is restricted to the legitimate api.eachlabs.ai domain.
[DATA_EXFILTRATION]: The skill correctly demonstrates using environment variables ($EACHLABS_API_KEY) for authentication rather than hardcoding secrets, which protects sensitive credentials and prevents accidental exposure.
[INDIRECT_PROMPT_INJECTION]: The skill handles user-provided text prompts for image generation. While this presents an untrusted data ingestion surface, the behavior is consistent with the skill's primary purpose and no evidence of capability abuse was detected.

reve-text-to-image