image-generation

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements image generation and editing functionality using official APIs from Google and OpenAI. The implementation utilizes established Python SDKs (google-genai and openai), ensuring communication is handled via legitimate service endpoints.
  • [SAFE]: Sensitive credentials (API keys) are handled using secure industry standards, such as environment variables and .env files. The scripts prioritize system environment variables and include fallback logic for local development files, preventing accidental hardcoding of secrets.
  • [SAFE]: Dependencies are managed transparently using PEP 723 inline script metadata. This allows tools like uv or pipx to automatically resolve and install the necessary packages (google-genai, openai, python-dotenv) from the official Python Package Index (PyPI) without requiring manual or hidden installation steps.
  • [SAFE]: Analysis of all scripts and documentation confirmed the absence of malicious patterns, such as prompt injection overrides, unauthorized data exfiltration, obfuscated code, or persistence mechanisms. The skill's behavior matches its stated purpose of providing an image generation interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 10:05 AM
Security Audit — agent-trust-hub — image-generation