clothing-extraction
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
node:child_process(spawn) inscripts/lib/providers.mjsto execute the vendor's CLI tool (dlazy). This is the intended primary purpose of the skill for image generation. - [EXTERNAL_DOWNLOADS]: The skill fetches content from trusted vendor domains such as
api.dlazy.com,files.dlazy.com, and official AI provider endpoints (OpenAI, Gemini, Fal, Replicate, Volcengine). These are standard operational requirements for cloud-based AI image generation. - [CREDENTIALS_SAFE]: The skill provides clear instructions for managing API keys via environment variables (e.g.,
OPENAI_API_KEY,DLAZY_API_KEY) and official CLI authentication (dlazy login). It does not contain hardcoded secrets.
Audit Metadata