lov-table2image
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts to perform core tasks including Markdown table rendering and user profile management. These scripts are invoked via standard command-line interfaces.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Markdown table data is sent to the vendor's official API endpoint at api.lovstudio.ai for rendering into PNG images. This network communication is essential to the skill's primary purpose. Additionally, the skill maintains a local configuration profile in the user's home directory to store non-sensitive preferences and workspace paths.
- [CREDENTIALS_UNSAFE]: The skill handles API tokens through environment variables (MABLE_API_TOKEN) or temporary command-line flags. The logic in scripts/profile_store.py and scripts/table2image.py explicitly prevents these sensitive credentials from being stored in persistent local files, adhering to security best practices.
Audit Metadata