dreamina-canvas-cli
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements best practices for command execution by instructing the agent to use argument arrays (argv) instead of shell interpolation, effectively mitigating the risk of command injection from user-provided text.
- [SAFE]: Strict data handling policies are defined, explicitly forbidding the persistence or logging of sensitive credentials, including OAuth tokens, cookies, signed URLs, and credit confirmation tokens.
- [SAFE]: The workflow incorporates a secure 'quote-confirm-run' transaction model for paid generation tasks, ensuring that the AI agent cannot approve expenditures or consume credits without explicit, action-time user consent.
- [SAFE]: File system interactions, such as asset uploads and downloads, are scoped to user-approved directories and include mandatory integrity verification using SHA-256 checksums and byte counts to detect partial or corrupted transfers.
- [SAFE]: The skill utilizes stable idempotency keys (UUIDs) for project and submission identities, providing a robust mechanism for task recovery and retries that prevents accidental duplicate billing or resource duplication.
Audit Metadata