imagegen
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure credential management practices by instructing the user to set the
OPENAI_API_KEYenvironment variable locally rather than pasting it into the chat. - [EXTERNAL_DOWNLOADS]: The skill uses
uvorpipto install standard, well-known libraries (openai,pillow) from official registries (PyPI). - [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/image_gen.py) and standard package managers (uv,pip). These are legitimate within the context of the skill's purpose as an image generation utility. - [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. Network activity is limited to the official OpenAI API via the standard SDK.
- [PROMPT_INJECTION]: No evidence of prompt injection or instructions to bypass safety filters was found. The instructions focus on structured prompting for better image results.
Audit Metadata