bfl-api
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and code examples for a third-party API integration, specifically for Black Forest Labs image generation models.
- [SAFE]: Secret management instructions follow security best practices by using .env files for local credential storage and recommending their exclusion from version control via .gitignore.
- [SAFE]: No signs of prompt injection, data exfiltration to unauthorized domains, or malicious persistence mechanisms were detected. All network operations target legitimate service endpoints (bfl.ai) or standard localhost/webhook patterns.
- [SAFE]: Code examples for Python, TypeScript, and shell scripts utilize standard, well-known libraries such as requests, aiohttp, axios, and express, and do not include any obfuscated content or dynamic execution of untrusted code.
Audit Metadata