fashn
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official
fashnSDK from npm and PyPI for both Python and TypeScript environments. These are official vendor packages for the FASHN service. - [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the FASHN REST API via
curland executes generative AI scripts usingnode. Key management operations are performed using standard CLI tools likemkdirandprintf. - [SAFE]: The skill implements strong security measures for handling sensitive data. It uses restrictive file permissions (
umask 077,chmod 600) for API key storage and single-quoted heredocs (<<'NODE') for script execution, which prevents command injection and variable expansion in generated code blocks.
Audit Metadata