byeapi-imagegen
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads generated images from remote URLs but enforces strict validation, including HTTPS-only connections and verification that hostnames resolve to public IP ranges.
- [COMMAND_EXECUTION]: The skill invokes its internal scripts for single and batch operations. It provides clear instructions to the agent on proper shell-quoting of arguments to prevent command injection.
- [DATA_EXFILTRATION]: Network requests are confined to the configured API endpoint. The scripts include robust logic to ensure API keys are redacted from any output or timing metadata returned to the agent context.
- [SAFE]: The skill follows secure development practices, such as PNG structure validation, atomic file saving via temporary files, and narrow file permissions for configuration data.
Audit Metadata