asset-gen
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
tools/rembg_matting.pyexecutes thenvidia-smicommand to detect the presence of NVIDIA GPUs for hardware acceleration. This check is performed using a fixed argument list without a shell, which is the secure and standard method for querying system hardware. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to upload images and download generated media (MP4 videos and GLB 3D models) from the official API endpoints of xAI and Tripo3D. These external communications are directed at well-known technology services and are essential for the skill's core functionality.
- [SAFE]: The skill manages its API keys by reading them from system environment variables rather than hardcoding them, aligning with industry standards for secure credential handling in developer tools.
Audit Metadata