image-generation

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill connects to Cloudflare Workers AI and Fal.ai APIs to fetch generated image data and utilize AI models. These are well-known service providers and the connections are integral to the skill's documented features.
  • [DATA_EXFILTRATION]: The tool uploads user-provided prompts and image files to Fal.ai's storage and processing endpoints. This is the intended operation of the skill, and API credentials are safely managed via environment variables.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text for image generation, creating a surface for indirect prompt injection. Given that this is the primary function of the tool and the impact is confined to the generated visual output, this behavior is considered standard for the use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:38 AM