Skills
Navigate
skills/lovstudio/general-skills/lovstudio-image-creator/Gen Agent Trust Hub

lovstudio-image-creator

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script gen_image.py utilizes subprocess.run to install missing Python dependencies (google-genai, Pillow) via pip and to open the generated image using the system's default viewer (open on macOS).
  • [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs required Python packages from PyPI at runtime. Additionally, the code-based rendering mechanism fetches several JavaScript libraries (React, Tailwind CSS, Babel) from the jsDelivr CDN and fonts from Google Fonts when rendering HTML to PNG.
  • [REMOTE_CODE_EXECUTION]: The skill's primary rendering mechanism uses Playwright to execute HTML, CSS, and JavaScript in a headless browser environment to generate layout images. This execution is confined to the browser context for the purpose of design rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 02:53 PM
Security Audit — agent-trust-hub — lovstudio-image-creator