fal-ai-media

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the fal-ai-mcp-server using npx. This is the official MCP implementation for fal.ai, a well-known service provider.
  • [CREDENTIALS_UNSAFE]: The skill correctly handles secrets by advising the use of environment variables and configuration files (.claude.json) for storing API keys (FAL_KEY, ELEVENLABS_API_KEY) instead of hardcoding them into scripts.
  • [COMMAND_EXECUTION]: Provides standard command-line examples for running the MCP server and Python snippets for interacting with voice synthesis APIs. These operations are restricted to the skill's primary purpose of media generation.
  • [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected in the instructions or code snippets provided.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 11:09 AM
Security Audit — agent-trust-hub — fal-ai-media