The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill uses the OPENAI_API_KEY environment variable for authentication, which is a secure practice for managing secrets. Network operations are restricted to api.openai.com, a well-known service, to perform its stated image generation tasks.
[INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined prompts to generate images. It implements proper HTML escaping for all user-controllable data before rendering it in the output gallery file (index.html), effectively mitigating stored XSS risks.
[DYNAMIC_EXECUTION]: The script decodes Base64-encoded image data received from the API. This is standard data processing for image retrieval and does not involve executable code injection.

openai-image-gen