linkfox-aigc-imagegen-product
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Subprocess shell executions flagged in
runner.py,single_task.py, andutils.pyare intended primary functionalities. They are safely locked down to call specified Python modules (sys.executableon absolute script targets) rather than interpreting arbitrary unsanitized shell inputs or strings. - [DYNAMIC_EXECUTION]: The module
importlib.import_module()used insingle_task.pyloads local companion files (build_textgen_paramsandbuild_imagegen_prompt) inside the explicitly verified repository structure (scripts/absolute folder). This safely limits dynamic resolution to native code distributed securely alongside the skill. - [SAFE]: Data validation guardrails are firmly implemented across the workflows, including emptiness parameter checks (
imageUrls), credential validation blocks (throwing immediate hard breaks instead of loop retries upon receiving 401/402 authentication and quota responses), and isolation protocols that safely containerize failure states for multi-task pipelines.
Audit Metadata