image-studio
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements a deliberate workflow for image generation using the fal.ai service. All operations, including credential handling, are consistent with standard local developer tools. The
falgen.pyscript includes a mechanism to automatically find API keys in the current working directory or home directory, using filename filters and specific regex patterns to ensure only relevant fal.ai credentials are retrieved. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute local Python scripts (
falgen.py,moss_compile_prompt.py) to process user requests. These scripts handle communication with the fal.ai API, file management, and layout compilation. - [EXTERNAL_DOWNLOADS]: The skill downloads generated images from the fal.ai CDN. This is the primary function of the skill and is performed after explicit user confirmation regarding data egress and API costs, as specified in the workflow documentation.
Audit Metadata