scientific-schematics
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_schematic.pyutilizessubprocess.runto call the internal AI generation logic. The implementation uses a list of arguments rather than a raw shell string, effectively mitigating command injection risks. - [EXTERNAL_DOWNLOADS]: The skill interacts with the
openrouter.aiAPI using therequestslibrary to perform image generation and quality assessment. This is a legitimate functional requirement and targets a well-known technology service. - [SAFE]: The core logic script includes a utility to load environment variables from a
.envfile by searching parent directories. This is a standard practice for developer tools to manage API keys securely and does not involve unauthorized data access.
Audit Metadata