image-generator-sd-webui
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes bash scripts located in the
scripts/directory to communicate with the Stable Diffusion WebUI API. These scripts employcurlfor HTTP requests andjqfor JSON processing. The implementation includes safety measures such as usingjq'sgetpathfunction inprogress.shto avoid injection vulnerabilities when accessing dynamic JSON fields. - [EXTERNAL_DOWNLOADS]: Documentation in
SKILL.mdpoints to an external GitHub repository (https://github.com/jim60105/sd-image-format-converter) for a format conversion utility. The skill identifies this as a user-installable helper and does not attempt to automate the download or execution, adhering to manual setup requirements for system dependencies. - [CREDENTIALS_UNSAFE]: The skill manages authentication through environment variables (SD_WEBUI_USER, SD_WEBUI_PASS), ensuring that credentials are provided by the user at runtime and not stored within the skill's code or metadata.
Audit Metadata