openai-image-gen
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill communicates exclusively with the official OpenAI API endpoint (
https://api.openai.com/v1/images/generations). Network operations are limited to sending image generation requests and downloading the resulting images viaurllib.request. No unauthorized data transmission was detected. - [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive credentials by requiring the
OPENAI_API_KEYto be provided as an environment variable. There are no hardcoded secrets or insecure storage mechanisms identified. - [COMMAND_EXECUTION]: Shell commands provided in the documentation are benign examples for running the included Python script and opening a local HTML gallery. The Python script itself does not invoke subprocesses or execute arbitrary shell commands.
- [EXTERNAL_DOWNLOADS]: The skill downloads generated images from URLs returned by the OpenAI API. This is a primary function of the skill and uses standard library tools (
urllib.request.urlretrieve).
Audit Metadata