ce-gemini-imagegen
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill performs its stated purpose using official libraries and standard API patterns.
- [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive credentials by requiring the
GEMINI_API_KEYto be provided via environment variables rather than hardcoding them in scripts or documentation. - [EXTERNAL_DOWNLOADS]: Dependencies are limited to well-known, official packages (
google-genaiandPillow). Therequirements.txtfile demonstrates good security posture by pinningPillowto a version that specifically addresses several known vulnerabilities (CVE-2023-175, etc.). - [COMMAND_EXECUTION]: File operations are handled using standard Python libraries (PIL and pathlib) without the use of dangerous shell command execution or subprocess spawning.
Audit Metadata