image-generator-sd-webui

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes bash scripts located in the scripts/ directory to communicate with the Stable Diffusion WebUI API. These scripts employ curl for HTTP requests and jq for JSON processing. The implementation includes safety measures such as using jq's getpath function in progress.sh to avoid injection vulnerabilities when accessing dynamic JSON fields.
  • [EXTERNAL_DOWNLOADS]: Documentation in SKILL.md points to an external GitHub repository (https://github.com/jim60105/sd-image-format-converter) for a format conversion utility. The skill identifies this as a user-installable helper and does not attempt to automate the download or execution, adhering to manual setup requirements for system dependencies.
  • [CREDENTIALS_UNSAFE]: The skill manages authentication through environment variables (SD_WEBUI_USER, SD_WEBUI_PASS), ensuring that credentials are provided by the user at runtime and not stored within the skill's code or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 10:42 AM