game-asset-gen
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A thorough analysis of the instructions, metadata, and bundled Python scripts found no evidence of malicious behavior. The skill performs only its stated functions of asset generation and image processing.
- [CREDENTIALS_SAFE]: The skill follows secure practices for handling API keys, utilizing environment variables (e.g.,
OPENAI_API_KEY,GEMINI_API_KEY) and.envfiles. No hardcoded credentials or private keys were detected. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to well-known AI provider endpoints (OpenAI and Google). While it supports user-configurable base URLs for API relays, this is a documented feature for developer flexibility and does not involve unauthorized data transmission.
- [DATA_INGESTION]: The skill processes local image files and batch job specifications (JSONL). The parsing logic for these inputs is safe, utilizing standard libraries without dangerous dynamic execution patterns.
Audit Metadata