linkfox-aigc-imagegen
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The agent executes local Python scripts (
aigc_imagegen.py,onboarding.py) to manage image generation workflows and account authentication. - [EXTERNAL_DOWNLOADS]: The skill downloads generated media from the vendor's API endpoints to a local session directory for user retrieval.
- [CREDENTIALS_UNSAFE]: The skill utilizes an API key stored in environment variables for authentication with its backend. It guides users on how to securely set these variables in their shell profiles.
- [PROMPT_INJECTION]: The skill processes user-supplied prompts and image URLs as parameters for the AIGC task. This surface is managed through service-side filtering and the structured nature of the API request.
- [SAFE]: All network traffic is confined to official domains (
linkfox.com), and file operations are scoped to a session-specific folder within the user's workspace.
Audit Metadata