threejs-image-generator
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill fulfills its stated purpose of asset generation using official and trusted APIs from Google.
- [COMMAND_EXECUTION]: The skill instructs the agent to run local Python scripts and shell commands to probe for credentials and generate assets. These operations are transparent, local to the user's environment, and standard for developer-centric tools.
- [EXTERNAL_DOWNLOADS]: Uses the
uvpackage manager to handle dependencies (google-genai,pillow). These are well-known, legitimate packages fetched from official registries. - [DATA_EXFILTRATION]: Communication is restricted to the official Google Gemini API for the purpose of sending image prompts and receiving generated asset data, which is the core intended functionality of the skill.
Audit Metadata