xfyun-image-understanding
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with official iFlytek API endpoints (spark-api.cn-huabei-1.xf-yun.com) via secure WebSockets (WSS) using standard protocol implementations.\n- [SAFE]: Sensitive credentials such as API keys and secrets are managed correctly through environment variables (XFYUN_APP_ID, XFYUN_API_KEY, XFYUN_API_SECRET) rather than being hardcoded in the source code.\n- [SAFE]: The implementation is built entirely using Python's standard library modules (socket, ssl, hmac, hashlib), which avoids risks associated with third-party package dependencies or supply chain vulnerabilities.\n- [SAFE]: File system interaction is restricted to reading the specific image file path provided by the user, with built-in checks to ensure the file exists and does not exceed the 4MB size limit set by the API.
Audit Metadata