image-generation

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official API endpoints for established and trusted services (Google Gemini, OpenAI, xAI, and OpenRouter). All network operations are directed to these well-known infrastructure domains.
  • [SAFE]: Credential management follows best practices by instructing the agent to use environment variables (GEMINI_API_KEY, OPENAI_API_KEY, XAI_API_KEY, OPENROUTER_API_KEY) rather than hardcoding secrets in the skill or scripts.
  • [SAFE]: The skill's functionality is transparently documented, and the use of standard system tools like curl, jq, and bash is appropriate for the stated purpose of interfacing with web-based image generation APIs.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found in the instructions or the accompanying technical documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 08:31 PM