generate-image

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes a Python script (generate_image.py) via the Bash tool to perform API requests and file operations. This is the intended mechanism for image generation.
  • [EXTERNAL_DOWNLOADS]: When configured to use the OpenAI backend with a URL-based response format, the script downloads generated image data from the remote API endpoint using urllib.request.urlopen. This is a standard operation for image generation workflows.
  • [DYNAMIC_EXECUTION]: The script employs __import__('os') and sys.path.insert to dynamically locate a shared library (progressive_env.py) within the plugin directory structure. This is used for consistent configuration management across the agent's environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 03:06 AM
Security Audit — agent-trust-hub — generate-image