listing-optimizer

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with several well-known AI services, including OpenAI, Google Gemini, Fal.ai, and Replicate, to perform image generation tasks. These connections are documented and integral to the skill's purpose. It also fetches user-provided image URLs to use as context for the AI models.
  • [COMMAND_EXECUTION]: The skill includes the gen.mjs script which orchestrates generation by calling the vendor's CLI tool (dlazy) using Node.js spawn. This is a controlled execution of a local tool meant to facilitate interaction with the platform.
  • [DATA_EXPOSURE]: API credentials for third-party services are managed through standard environment variables and local configuration files, which is consistent with industry best practices for secure secret management in developer tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 06:46 AM