image-generation
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses
npx -y luxin-cli@latestto download and run the latest version of the Luxin CLI from the NPM registry. The-yflag is used to execute the package without requiring manual user confirmation. - [EXTERNAL_DOWNLOADS]: During installation and operation, the skill fetches metadata, guidance, and updates from the vendor's domain
luxin.shand the author's GitHub repositorydanielgwilson/luxin. - [COMMAND_EXECUTION]: The skill executes shell commands to configure environment variables such as
LUXIN_SKILL_REVISIONandCODEX_HOME, manages directory structures for the agent's workspace, and interacts with the installed CLI.
Audit Metadata