image-generation
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official API endpoints for established and trusted services (Google Gemini, OpenAI, xAI, and OpenRouter). All network operations are directed to these well-known infrastructure domains.
- [SAFE]: Credential management follows best practices by instructing the agent to use environment variables (
GEMINI_API_KEY,OPENAI_API_KEY,XAI_API_KEY,OPENROUTER_API_KEY) rather than hardcoding secrets in the skill or scripts. - [SAFE]: The skill's functionality is transparently documented, and the use of standard system tools like
curl,jq, andbashis appropriate for the stated purpose of interfacing with web-based image generation APIs. - [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found in the instructions or the accompanying technical documentation.
Audit Metadata