ideogram-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates the configuration of authentication for Ideogram, a well-known AI image generation service, using its official REST API endpoints.
- [SAFE]: The instructions implement security best practices by guiding users to store sensitive API keys in a .env file and recommending the immediate addition of this file to .gitignore to prevent accidental exposure in version control.
- [SAFE]: Dependencies specified for installation (dotenv, requests, python-dotenv) are standard, widely-used libraries from official public registries (NPM and PyPI).
- [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern where data (prompts) is sent to an external API service for processing. 1. Ingestion points: Prompt strings processed by verify-ideogram.ts and verify_ideogram.py. 2. Boundary markers: None present in the code examples. 3. Capability inventory: Uses network capabilities (fetch and requests) to communicate with api.ideogram.ai. 4. Sanitization: Not implemented in the provided connectivity check examples, which use hardcoded benign verification prompts.
Audit Metadata