volcengine-ark-image-generator
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust authentication model using a dedicated local configuration file (auth.json), which is a recommended practice for managing API credentials without hardcoding them.
- [SAFE]: The execution script generate-image.mjs includes security features such as redacting API keys, signed URLs, and base64 image data from console output to prevent accidental exposure in logs.
- [SAFE]: File system security is maintained through workspace path validation in the output handling logic, ensuring that generated images are only saved within the intended project directory and preventing path traversal.
- [SAFE]: The skill provides clear guidance on model selection and parameter validation, reducing the risk of unexpected behavior or API misuse when handling user-provided prompts and reference images.
- [SAFE]: No signs of obfuscation, malicious persistence, or unauthorized privilege escalation were found; all network operations target official provider domains for the intended service.
Audit Metadata