ideogram-rate-limits

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill facilitates communication with the official Ideogram API endpoint (api.ideogram.ai) for its intended purpose of image generation.
  • [SAFE]: Credential management follows best practices by instructing the use of process.env.IDEOGRAM_API_KEY rather than hardcoding secrets.
  • [SAFE]: The skill utilizes the well-known p-queue library for managing request concurrency.
  • [INDIRECT_PROMPT_INJECTION]: The skill functions process user-provided strings which are interpolated into API requests for an external service.
  • Ingestion points: The queuedGenerate and batchGenerate functions in SKILL.md accept prompt variables.
  • Boundary markers: Input data is encapsulated within a JSON structure for the fetch request, providing clear data/instruction separation for the API.
  • Capability inventory: The skill uses network access to reach api.ideogram.ai and implements standard time-delay logic for rate limiting.
  • Sanitization: Input strings are passed to the API without additional content filtering or sanitization within the provided boilerplate code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 09:30 AM