setting-profile-images
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
gitcommands via Python'ssubprocess.runto manage agent memory files. - Evidence:
subprocess.run(cmd, cwd=cwd, text=True, capture_output=True, check=False)inscripts/set_profile_image.py. - Behavior: The commands are restricted to standard
gitoperations (git add,git commit,git rev-parse) performed within the agent's memory directory to track profile image changes. - [EXTERNAL_DOWNLOADS]: The skill uses the Python
urlliblibrary to optionally verify the updated profile image via the Letta backend API. - Evidence:
urllib.request.urlopen(req, timeout=10)inverify_profile. - Behavior: This is a standard verification step that communicates only with the configured
LETTA_BASE_URLusing the providedLETTA_API_KEYto confirm the upload was successful.
Audit Metadata