imagegen

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows secure credential management practices by instructing the user to set the OPENAI_API_KEY environment variable locally rather than pasting it into the chat.
  • [EXTERNAL_DOWNLOADS]: The skill uses uv or pip to install standard, well-known libraries (openai, pillow) from official registries (PyPI).
  • [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/image_gen.py) and standard package managers (uv, pip). These are legitimate within the context of the skill's purpose as an image generation utility.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. Network activity is limited to the official OpenAI API via the standard SDK.
  • [PROMPT_INJECTION]: No evidence of prompt injection or instructions to bypass safety filters was found. The instructions focus on structured prompting for better image results.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 01:52 PM