bfl-api
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and integration patterns for the Black Forest Labs API.
- [DATA_EXPOSURE]: The skill handles the
BFL_API_KEYenvironment variable for authentication and provides instructions for secure local secret management using.envfiles and.gitignore, which is a standard industry practice. - [EXTERNAL_DOWNLOADS]: The skill documents interactions with official API endpoints at
api.bfl.aiand temporary image delivery URLs from Microsoft Azure Blob Storage (bfldeliveryprod.blob.core.windows.net), both of which are expected and necessary for the service's functionality. - [METADATA_POISONING]: There is a discrepancy between the author listed in the YAML frontmatter ('Black Forest Labs') and the actual skill author ('fritzgeraldz'). While this is a form of metadata poisoning, in this context it appears to be descriptive of the API being documented rather than a malicious attempt to deceive for privilege.
Audit Metadata