ideogram-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses kubectl commands to manage environment variables and rollouts for Kubernetes deployments during rollback procedures. These operations are restricted by the allowed-tools configuration and are directly related to the skill's primary purpose of production maintenance.
  • [EXTERNAL_DOWNLOADS]: The deployment and health check scripts utilize curl to interact with the Ideogram API (https://api.ideogram.ai). This is a well-known service associated with the skill's functionality, used here for valid pre-flight verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the handling of user-submitted prompts for image generation and explicitly mandates security best practices, such as server-side validation and sanitization of prompts, to mitigate potential injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 09:30 AM