openai-image-gen
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with official OpenAI API endpoints (api.openai.com) for image generation, which is the expected and legitimate service for its stated purpose.
- [SAFE]: Sensitive credentials (OPENAI_API_KEY) are handled securely through environment variables rather than being hardcoded in scripts or configuration files.
- [SAFE]: The script implements proper output sanitization using HTML escaping to mitigate potential cross-site scripting (XSS) risks when displaying user-provided prompts in the thumbnail gallery.
- [SAFE]: Local filesystem operations are limited to the creation and population of an output directory for generated images and metadata, with no unauthorized access to sensitive system paths or persistence attempts.
Audit Metadata