generate-image
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is implemented using only Python's standard library, minimizing the attack surface by avoiding unverified third-party dependencies.
- [SAFE]: Sensitive API keys are managed through standard environment variables and local configuration files, with no hardcoded credentials found in the code or instructions.
- [SAFE]: Network operations are appropriately scoped to the OpenRouter API and user-provided image URLs, including safety mechanisms like HTTPS enforcement and response size limits.
- [SAFE]: The skill provides a dry-run mode and pre-flight capability checks to validate requests locally before they are sent to the paid API service.
Audit Metadata