listing-optimizer
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with several well-known AI services, including OpenAI, Google Gemini, Fal.ai, and Replicate, to perform image generation tasks. These connections are documented and integral to the skill's purpose. It also fetches user-provided image URLs to use as context for the AI models.
- [COMMAND_EXECUTION]: The skill includes the
gen.mjsscript which orchestrates generation by calling the vendor's CLI tool (dlazy) using Node.jsspawn. This is a controlled execution of a local tool meant to facilitate interaction with the platform. - [DATA_EXPOSURE]: API credentials for third-party services are managed through standard environment variables and local configuration files, which is consistent with industry best practices for secure secret management in developer tools.
Audit Metadata