ideogram-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains TypeScript implementation guides for performance optimization, using standard libraries and patterns.
- [SAFE]: Sensitive configuration and credentials (API keys, S3 buckets) are handled via environment variables (
process.env), which is the correct approach for secret management in this context. - [SAFE]: External links and library references, such as the
p-queuepackage, point to official documentation and well-known repositories. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for processing user-supplied prompts that trigger network and file system actions.
- Ingestion points: Prompt input in
cachedGenerateandparallelGeneratefunctions in SKILL.md. - Boundary markers: None present.
- Capability inventory: Local file writing (
fs.writeFileSync), network requests (fetch), and remote storage uploads (PutObjectCommand). - Sanitization: No sanitization logic is included in the example code, which represents an inherent surface area for image generation tools.
Audit Metadata