ideogram-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!command`` syntax inSKILL.mdto executenpm list 2>/dev/null | head -10automatically when the skill is loaded. This is used to report the current local development environment state and is a benign use of the dynamic context feature. - [COMMAND_EXECUTION]: The skill includes instructions for auditing a codebase using
grepto identify existing Ideogram API usage and parameter patterns. These commands are intended for manual review and execution by the developer. - [SAFE]: The provided TypeScript code snippets follow security best practices by using environment variables (
process.env.IDEOGRAM_API_KEY) for authentication rather than hardcoding credentials. All network operations target the legitimateapi.ideogram.aiservice endpoints.
Audit Metadata