ai-image-generation
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses
npx -y luxin-cli@latestto execute image generation tasks. This pattern downloads theluxin-clipackage from the NPM registry and executes it locally to facilitate text-to-image conversion. - [EXTERNAL_DOWNLOADS]: The skill references and downloads external code from the NPM registry (
luxin-cli,skills) and provides installation instructions targeting the vendor's GitHub repository (danielgwilson/luxin). These resources are managed through well-known package managers and registries. - [COMMAND_EXECUTION]: The instructions include shell commands for environment setup, such as
mkdir -pandexportto define workspace paths (HOME,CODEX_HOME), ensuring that the agent has a writable location for skill state and metadata.
Audit Metadata