artifex
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
npxandpnpm dlxcommands to execute the@gatewai.studio/artifexCLI tool for media rendering, validation, and graph building. - [EXTERNAL_DOWNLOADS]: The use of
npx -y @gatewai.studio/artifexinvolves downloading and executing code from the NPM registry. This is a standard method for using this vendor's CLI utility. - [DATA_EXFILTRATION]: The skill documents a
Webhooknode designed to send workflow outputs, including text and media, to external URLs via HTTP requests. This is a legitimate automation feature of the workflow engine. - [CREDENTIALS_UNSAFE]: The documentation references the storage of API keys for Fal AI and OpenRouter in a local configuration file at
~/.config/gatewai/credentials.json. The instructions guide the agent on how to manage these credentials for authenticating with AI service providers.
Audit Metadata