image-generation
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements image generation and editing functionality using official APIs from Google and OpenAI. The implementation utilizes established Python SDKs (
google-genaiandopenai), ensuring communication is handled via legitimate service endpoints. - [SAFE]: Sensitive credentials (API keys) are handled using secure industry standards, such as environment variables and
.envfiles. The scripts prioritize system environment variables and include fallback logic for local development files, preventing accidental hardcoding of secrets. - [SAFE]: Dependencies are managed transparently using PEP 723 inline script metadata. This allows tools like
uvorpipxto automatically resolve and install the necessary packages (google-genai,openai,python-dotenv) from the official Python Package Index (PyPI) without requiring manual or hidden installation steps. - [SAFE]: Analysis of all scripts and documentation confirmed the absence of malicious patterns, such as prompt injection overrides, unauthorized data exfiltration, obfuscated code, or persistence mechanisms. The skill's behavior matches its stated purpose of providing an image generation interface.
Audit Metadata