The Agent Skills Directory

[SAFE]: The skill performs its intended function without any detected security risks or malicious behaviors.- [EXTERNAL_DOWNLOADS]: The 'generate.sh' script communicates with the official Google Gemini API endpoint at generativelanguage.googleapis.com. This is a well-known service and the communication is required for the skill's primary purpose.- [CREDENTIALS_UNSAFE]: The skill utilizes the GEMINI_API_KEY environment variable. It does not contain hardcoded secrets and provides clear instructions for users to manage their own API keys securely via shell environment variables.- [COMMAND_EXECUTION]: The skill invokes standard system utilities such as curl, jq, and base64. The script safely handles user-supplied input by using jq to generate the JSON request body, which prevents command injection vulnerabilities.- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration was found. The only network activity is the direct transmission of the generated prompt to the official Google API.

minimal-zine-poster