draw-free
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local PowerShell script (
draw-free.ps1) to perform image generation tasks. The instructions use-ExecutionPolicy Bypass, which is a common practice for running local scripts provided within a toolset. - [EXTERNAL_DOWNLOADS]: The script downloads image data from
pollinations.ai, which is a well-known open-source AI image generation service. This operation is performed usingInvoke-WebRequestand saves the result as a PNG file. - [DATA_EXPOSURE]: The script allows specifying an output directory (
--outdir). While it creates directories if they don't exist, it operates within the security context of the user executing the agent.
Audit Metadata