model-integration
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to inspect the local environment for available API credentials.
- Evidence: Uses
env | grep -oEinSKILL.mdto identify configured keys likeOPENAI_API_KEYandGEMINI_API_KEYwithout printing their values. - [EXTERNAL_DOWNLOADS]: Installation instructions reference official SDKs for reputable AI service providers.
- Evidence: References to
google-genai,openai,replicate, andfal-clientin provider-specific reference files. - [DATA_EXFILTRATION]: The skill initiates network requests to official endpoints of established AI services.
- Evidence: Python scripts in
references/fal.md,references/gemini.md,references/openai-xai.md, andreferences/replicate.mdcommunicate with APIs for Google, OpenAI, xAI, fal.ai, and Replicate. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied natural language prompts to guide image and video generation.
- Ingestion points: User prompts for image/video generation tasks specified in
SKILL.md. - Boundary markers: Absent; the skill relies on natural language context rather than technical delimiters.
- Capability inventory: Network operations using provider SDKs and local file system writes for saving output images (as seen in
references/fal.md,references/gemini.md, andreferences/openai-xai.md). - Sanitization: Absent; the skill relies on the safety guardrails and content filtering of the destination model providers.
Audit Metadata