skills/editframe/skills/editframe-api/Gen Agent Trust Hub

editframe-api

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill documentation follows security best practices for secret management, instructing users to use environment variables for API keys and warning against hardcoding them or exposing them in client-side code.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates communication with official Editframe services and repositories. It utilizes the official @editframe/api and @editframe/assets packages and interacts solely with legitimate vendor domains such as editframe.com and its subdomains.
  • [COMMAND_EXECUTION]: Local file system operations (reading and writing media files) are performed using standard Node.js APIs (fs), which are necessary for the skill's primary function of media processing.
  • [DATA_EXFILTRATION]: All network requests are directed to the vendor's official API endpoints for legitimate purposes like uploading assets or fetching render progress.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 01:25 AM