create-image-gpt-image-fal
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script downloads generated image assets from the fal.ai content delivery network to the local filesystem using the standard urllib library.
- [DATA_EXFILTRATION]: The skill reads authentication tokens from the local configuration file at
~/.gooseworks/credentials.jsonto authorize requests sent to the image generation proxy. This access is limited to the vendor's own credential store and is used for legitimate authentication purposes. - [DYNAMIC_EXECUTION]: The script modifies the Python system path to import the local
media_proxy.pyhelper, which is a common practice for modularity in self-contained scripts.
Audit Metadata