dicebear-image-generator

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches image data and metadata from api.dicebear.com. These requests are directed to a well-known, public service for its intended purpose. The script uses a specific User-Agent and handles HTTP errors (such as rate limits) appropriately.
  • [COMMAND_EXECUTION]: The SKILL.md file provides examples of executing the bundled Python script dicebear_avatar.py to list styles, retrieve options, and generate images. The script uses argparse for robust input handling.
  • [DATA_EXPOSURE]: The script implements strict validation for style names (using regex) and options. It ensures the seed is passed via a dedicated flag rather than generic options to prevent potential parameter confusion. The output path is expanded using expanduser() and validated against a set of allowed image extensions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 04:45 PM