scientific-schematics

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_schematic.py utilizes subprocess.run to call the internal AI generation logic. The implementation uses a list of arguments rather than a raw shell string, effectively mitigating command injection risks.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the openrouter.ai API using the requests library to perform image generation and quality assessment. This is a legitimate functional requirement and targets a well-known technology service.
  • [SAFE]: The core logic script includes a utility to load environment variables from a .env file by searching parent directories. This is a standard practice for developer tools to manage API keys securely and does not involve unauthorized data access.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 10:21 AM