cover-image-generation
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill uses a Python script to interact with the Gemini API. While it executes shell-style commands for image generation and local file operations, these are constrained to the skill's specific purpose of generating and saving cover images.
- [Environment Variable Usage]: The script accesses the
GEMINI_API_KEYenvironment variable for authentication. This is a standard and safe method for managing API credentials locally without hardcoding sensitive information. - [Local File Access]: The skill reads from a specified metadata file (
show_notes.json) and writes the generated image to a workspace directory. These file operations are scoped to the provided arguments and are typical for an image generation workflow.
Audit Metadata