skills/fashn-ai/fashn-skill/fashn/Gen Agent Trust Hub

fashn

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the official fashn SDK from npm and PyPI for both Python and TypeScript environments. These are official vendor packages for the FASHN service.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the FASHN REST API via curl and executes generative AI scripts using node. Key management operations are performed using standard CLI tools like mkdir and printf.
  • [SAFE]: The skill implements strong security measures for handling sensitive data. It uses restrictive file permissions (umask 077, chmod 600) for API key storage and single-quoted heredocs (<<'NODE') for script execution, which prevents command injection and variable expansion in generated code blocks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 08:58 PM
Security Audit — agent-trust-hub — fashn