fal-ai-media
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions involve configuring an MCP server via
npx -y fal-ai-mcp-server, which downloads and executes the package from the public npm registry. This is a standard integration pattern for using the well-known fal.ai service tools. - [COMMAND_EXECUTION]: The skill configuration relies on
npxto launch the fal-ai server. Additionally, it provides Python code snippets for direct API interaction with services like ElevenLabs using the requests library. - [DATA_EXFILTRATION]: Sensitive API keys (FAL_KEY, ELEVENLABS_API_KEY) are managed through environment variables rather than hardcoded strings, which is a standard security best practice. Network operations are directed towards official API endpoints of well-known service providers.
Audit Metadata