image-generator-sd-webui
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The analysis of all 10 files revealed no malicious patterns, obfuscation, or unauthorized data access.
- [COMMAND_EXECUTION]: The skill utilizes Bash scripts to wrap curl commands for API interactions. These scripts are technical wrappers and do not exhibit dangerous command injection patterns.
- [CREDENTIALS_UNSAFE]: User credentials for the WebUI server are correctly handled via environment variables (SD_WEBUI_USER, SD_WEBUI_PASS) rather than being hardcoded.
- [EXTERNAL_DOWNLOADS]: References to external tools (e.g., sd-image-format-converter on GitHub) are for optional user-installed utilities and are authored by the same developer as the skill.
Audit Metadata