ideogram-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a template for a typed client wrapper to interact with the official Ideogram API. No hardcoded credentials or malicious patterns were found.
- [EXTERNAL_DOWNLOADS]: The skill installs common and well-known development dependencies from the NPM registry, including
dotenv,typescript,tsx, andvitest. - [DATA_EXFILTRATION]: Network operations are restricted to the official Ideogram API domain (
api.ideogram.ai) and a legitimate placeholder image service (placehold.co) used for mocking responses. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided prompts to generate images, it is a standard development surface with low risk, as it is intended for integration testing and local development cycles.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to store sensitive information in a
.env.localfile and use environment variables rather than hardcoding secrets.
Audit Metadata