bfl-api

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate documentation and integration patterns for the Black Forest Labs API.
  • [DATA_EXPOSURE]: The skill handles the BFL_API_KEY environment variable for authentication and provides instructions for secure local secret management using .env files and .gitignore, which is a standard industry practice.
  • [EXTERNAL_DOWNLOADS]: The skill documents interactions with official API endpoints at api.bfl.ai and temporary image delivery URLs from Microsoft Azure Blob Storage (bfldeliveryprod.blob.core.windows.net), both of which are expected and necessary for the service's functionality.
  • [METADATA_POISONING]: There is a discrepancy between the author listed in the YAML frontmatter ('Black Forest Labs') and the actual skill author ('fritzgeraldz'). While this is a form of metadata poisoning, in this context it appears to be descriptive of the API being documented rather than a malicious attempt to deceive for privilege.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 09:33 PM