kling-kolors-image
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts that use
subprocess.Popento execute the Kling AI command-line interface and a user-specified scanning utility. These executions are handled securely without a shell and incorporate strict timeouts and output volume constraints.\n- [EXTERNAL_DOWNLOADS]: The documentation instructs the user to install official tooling from the npm registry and includes logic to download image results from the Kling AI API. These downloads target verified vendor domains and incorporate multiple validation layers, such as hostname checks and DNS routability verification.\n- [SAFE]: The provided code demonstrates a high degree of security awareness by implementing integrity verification for installed Python packages, cryptographic pinning of approval plans, and atomic file operations to prevent race conditions or partial writes.
Audit Metadata